{"report_id":"1c137d38-f5f4-455f-a76a-bf9e200a696f","version":6,"status":"done","tags":[],"date":"2026-01-26T12:56:02Z","url":{"schema":"http","addr":"tudou.831365.cc","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":0,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"tudou.831365.cc/","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"title":"欢迎莅临","dom":{"size":27228,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16138)","md5":"8c0359c1db16848fbcf32f01766507a4","sha1":"1b066f8136453abe539774fbc3ef04d54c4a7cbb","sha256":"ec5d563f50d0586f35d322f83abbbf2080cdcf02bbce670cd30edfd82eda2538","sha512":"1486880e989d3928e6a6385837a68552277ab5ee455f3e5f024b499dfdd56ffb6fd2fe11e8c8a14befc83a15ab9107abadf8ad88f34c43581bb1964753bae976","ssdeep":"768:3MUpfxnnnnvTh6u3ExM3qFk69W8teh2WkN:3MyxnnnnvexM3qFk69WZeN","tlshash":"7bc25d72a6e510374117c0e86b7bab0d6ec6a10bca4bce4479ec46c55fc7e66cca358c","dom_hash":"domhash702efcc7db06b165de63a9d8bbb5d198","first_seen":"2026-01-26T12:56:06.977226Z","last_seen":"2026-01-26T12:56:06.977226Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tudou.831365.cc","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":0,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T12:56:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tudou.831365.cc","ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2015-10-11","domain_rank":0,"first_seen":"2026-01-07T16:15:03.651786Z","last_seen":"2026-01-26T12:22:50.127415Z","alert_count":48,"request_count":12,"received_data":462644,"sent_data":7408,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-01-26T03:12:29.058923Z","alert_count":0,"request_count":1,"received_data":360,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lykwbor.juqhbwfolcekjd.top","ip":{"addr":"20.24.220.41","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-12-08","domain_rank":0,"first_seen":"2026-01-26T12:56:03.193642Z","last_seen":"2026-01-26T12:56:03.193642Z","alert_count":0,"request_count":1,"received_data":20270,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hcdream.com","ip":{"addr":"45.194.140.3","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"domain_registered":"2018-06-21","domain_rank":0,"first_seen":"2019-01-18T16:52:36Z","last_seen":"2026-01-06T14:22:36.510482Z","alert_count":0,"request_count":1,"received_data":3559,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tudou.831365.cc/","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"061b74ab032a4db2463e67fd866d37ab","sha1":"39855dc979db36d433e186cb86747b0667b5bd27","sha256":"07862f3082f26efaf4be0ea6ea54fb8f9df862642e803f1c3b650d2df83419db","sha512":"4eeef9e679a5f5de29cd4e88e78c3b5673f24662754124e737f71a1d0f81176ed9e1e7b82961aaefc1960381c5d1ad3cfe3d709929c8caae13a08c7c8b779b9e","ssdeep":"","tlshash":"b0b01253cc0a90001de1173941b806008cd7f38143c14fe2b0f043a50e548308099001","size":89,"data":"","first_seen":"2026-01-26T12:22:52.863953Z","last_seen":"2026-01-27T00:11:25.195104Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"561f313145a30e9df6c412042960dec7","sha1":"9f13c766e1b1d2cee7c8f90058ab2a1c5d8e5692","sha256":"9a82831bfbe10225039832963f388ebb33487c10dd719cb9e3dcd9c31072b958","sha512":"94f065e4ae47073012707f1d1d4895b89b666e40b472889fbaca254980bb8edb3f9d4dd675897db1aa2cf4ac9a98692b78c0516c591b9312b243a68ac70854bd","ssdeep":"","tlshash":"5f5121b761fb012a4163b0ddab5b62083757610b5845ce42be2c47814fc6e6fc9a36cd","size":2523,"data":"","first_seen":"2026-01-26T12:22:52.866181Z","last_seen":"2026-01-27T00:11:25.195934Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"50971b405a6a8d6f17d21f333d54409d","sha1":"5dfab942a1b61bfd4725eb64d4796a6340c35cb3","sha256":"81203991cc8fe07928ea3e7d74c81aeec952decb60a7a82d606e5145562534d5","sha512":"8fd4ccfef4207f3c67befc25014ecd91a517e0aa22724181753f8bcd0a677f9119cb149962e53d5697442a8f30e70b6d2f1769781823c186459305fd0081e089","ssdeep":"","tlshash":"8a319157228b34354277913b9b8fee05b3fb11830549cc1078ac88815f84e3542f5bed","size":1445,"data":"","first_seen":"2026-01-19T14:18:09.496195Z","last_seen":"2026-04-03T13:33:05.406774Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-12T01:36:47.082494Z","times_seen":98971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hcdream.com/berlin/customer-service/kefu78.js","fqdn":"hcdream.com","domain":"hcdream.com","tld":"com"},"ip":{"addr":"45.194.140.3","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"22258c2199930f806a7f779bf5eb8dbe","sha1":"7f8011391361c93bd1153b1ff509abb9881c75ae","sha256":"95726622caa1f472a5ea2083f6ca97d88abe843f2c19e1d2c252876d0397a7ee","sha512":"20c326393647b5c30c94887ffbacccbd70aa15f99aad3ece6a7036c1affb4e7e43b8729d1d4864f9784471ec6ec65069a66810d8b93ecc3b010e641f7e975c35","ssdeep":"","tlshash":"925140d6a9ba5521450311f95beb3b68713b646ffd06ee21335cc98c0f89cda902f688","size":3103,"data":"","first_seen":"2025-12-30T06:56:12.510622Z","last_seen":"2026-01-29T02:15:31.285408Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lykwbor.juqhbwfolcekjd.top/widget/linkchat.1.1.0.js","fqdn":"lykwbor.juqhbwfolcekjd.top","domain":"juqhbwfolcekjd.top","tld":"top"},"ip":{"addr":"20.24.220.41","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"59b0c9f1c537544a364cc03e11815b34","sha1":"88c488181283b1ed9bf3e3c48ac056a312e47506","sha256":"afd9b6f3b5ea5286fe30818f301786af0f5c79890e873ccf2b8d0ce2c1e65fe6","sha512":"fa4961eca50806364cf62f8c817cde4dfaa9d44ac7e1a7cb7376b08a4047d9bf6f5660417872bf03b6cd0167f8987985806697c7bd5fc1f014c053ddbf2ab98e","ssdeep":"384:s/AmLO+73nnnnOGyME7k6yr3ExMdRQjFFk5o9WenZbFnIE2OeIy4jAZktY9xkSxM:s/hiannnnvTh6u3ExM3qFk69W8teh2Wa","tlshash":"dd92b034f748652ad02d407921be7a4c799a386f9b054aec30b2e5e39dfc95c3571a3c","size":19939,"data":"","first_seen":"2023-09-02T04:11:25Z","last_seen":"2026-05-30T15:22:50.69376Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tudou.831365.cc/images/imgtxt.gif","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:42.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /images/imgtxt.gif HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nlast-modified: Mon, 27 Nov 2023 10:10:04 GMT\r\naccept-ranges: bytes\r\netag: \"0a6c3e31921da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:42 GMT\r\ncontent-length: 4598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":4598,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 690 x 48","md5":"e2ccddbddcd70822dbc5aca5f9fe31e8","sha1":"e7b8383257fc12b46b4ba282d02156d1db617fc8","sha256":"efb03cc74be5b027ffa5bb4bef0cb3ba5f9854ff25d07996f550e1ed3d4062fb","sha512":"2115efb43c865fab23f2b316e9507158094a64b844c72fbf9ada392d8ce2f487c72c643cd7b37915b428d515a3ef1a6a1b7610ca5add8031e9762e09641f6c25","ssdeep":"96:AunUdh2wOs56hNf34N+C2IrLGPF3S5BNOjg1LvLEDxYkgwH5hG8ZomJ91:ARAa+ChL0lSjN0g1LvYCwH5w8ZXv1","tlshash":"a6915d4deeb11441c14a3f7269b39c496927b44046d4f055b7eee422857cab721cfdcb","first_seen":"2025-10-10T03:25:52.153065Z","last_seen":"2026-07-05T07:15:08.280416Z","times_seen":22,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:45.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 282\r\nOrigin: https://tudou.831365.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://tudou.831365.cc\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Mon, 26 Jan 2026 12:55:45 GMT\r\neo-log-uuid: 10782387115725745590\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/images/jiantou.png","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:45.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /images/jiantou.png HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nCookie: __vtins__3JLON4yX9HiDBPtR=%7B%22sid%22%3A%20%224c96574c-df84-58f5-870f-9152f31a0cfb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201769433945283%2C%20%22ct%22%3A%201769432145283%7D; __51uvsct__3JLON4yX9HiDBPtR=1; __51vcke__3JLON4yX9HiDBPtR=1a8eea6c-107b-54fd-a507-40846520dae2; __51vuft__3JLON4yX9HiDBPtR=1769432145290\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Feb 2023 06:05:42 GMT\r\naccept-ranges: bytes\r\netag: \"03fc285714ad91:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:45 GMT\r\ncontent-length: 306\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 12, 8-bit colormap, non-interlaced","md5":"2e47611abe6f6320067ef07c06c65906","sha1":"8b766933c6cd949b6fbc2d06659b5baf790b4917","sha256":"5af2790a57ca6739d61a3a564b49ddbe2f40e0294e38f4fdb56190dfec8c6ddd","sha512":"63255a48a865c08253e99f07f9f175f79fcde61688e8224342aaf8c0250b53a857d802172e479daf91110ca1324226bfb395bed851f61a44bb878bfae2b8b5d7","ssdeep":"","tlshash":"54e0a7ea5a4159e7ccac5217531d14467d21ef34db5541075bc578bd6c370706181193","first_seen":"2024-08-31T03:40:51Z","last_seen":"2026-07-05T07:15:08.274075Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/video/play1.mp4","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:45.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /video/play1.mp4 HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=7667712-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nCookie: __vtins__3JLON4yX9HiDBPtR=%7B%22sid%22%3A%20%224c96574c-df84-58f5-870f-9152f31a0cfb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201769433945283%2C%20%22ct%22%3A%201769432145283%7D; __51uvsct__3JLON4yX9HiDBPtR=1; __51vcke__3JLON4yX9HiDBPtR=1a8eea6c-107b-54fd-a507-40846520dae2; __51vuft__3JLON4yX9HiDBPtR=1769432145290\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Mon, 27 Nov 2023 05:05:50 GMT\r\naccept-ranges: bytes\r\netag: \"04b8863ef20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:45 GMT\r\ncontent-length: 25378\r\ncontent-range: bytes 7667712-7693089/7693090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":25378,"size_decoded":0,"mime_type":"video/mp4","magic":"Dyalog APL DFS component file 64-bit level 3 journaled checksummed version 105.113","md5":"925ab35e6ba63682233048ce0e035130","sha1":"599ad768f25dc23913584d71b6e1890d6bd7c041","sha256":"1e85439ef86ff4916a354f39b9131f69679f55c681361a6c5009188fd2e7a6be","sha512":"4f232620f52499b2346b0afe677d22cc9c05e895e0c27ff60a6d24f0bb7be728fc8a28612b7bc53f01814a1332b19deadbf621eb47a7ed72ccddcd641bf0f7ea","ssdeep":"384:9Mt/kkS741lb5+cq1d1tRYfTn19bWnXATWNU1iA5:svlbEcej/yTnmnlyN5","tlshash":"6db28e26d3e0500acd7286b9a5c61712b779e5b8770747cfabe6a03efd4bb680d43084","first_seen":"2024-08-31T03:40:51Z","last_seen":"2026-07-05T07:15:08.278133Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2530,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2529,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T12:55:41.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 18 Jan 2026 12:38:43 GMT\r\naccept-ranges: bytes\r\netag: \"804b59617788dc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:42 GMT\r\ncontent-length: 2793\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":7487,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"c899ed69ee51db9e809f66cab22ce42d","sha1":"e3df6ed6690a16b6ebe4b844fb8b7e48cbd15480","sha256":"c8a28b90bf062f302ea43a94cf2a06268dbcfde3c0e26755554e132bab5b0df7","sha512":"26e9399b91843eaa5a008369b37c52e00490f4f7945f2c2fc93f0dc1ab3f92f34badcb27cb226e7a32a3216347e9a2a201f3907b8916d1af3ac47290ef006a01","ssdeep":"192:m9h+WT+INmAt9DnnvG/wgXX+o/Y2pEIzSqHs+D:m97nv5gXuuFEI5t","tlshash":"6df1746350f61037025390e99baba70d7ad6e107864acd4479fc46854fc7e9ac8b36cd","first_seen":"2026-01-26T12:22:52.835556Z","last_seen":"2026-01-27T00:11:25.184953Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1840,"timings":{"blocked":791,"dns":3,"connect":254,"send":0,"wait":256,"receive":1,"ssl":531},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/images/lg78.gif","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:42.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /images/lg78.gif HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nlast-modified: Sun, 26 Nov 2023 07:18:33 GMT\r\naccept-ranges: bytes\r\netag: \"80ea6fc33820da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:42 GMT\r\ncontent-length: 94194\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":94194,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 750 x 98","md5":"9dd6bd580ede939d8e4e9e4abe92f297","sha1":"1bfa6911058b5fbb76735a822cc7027c34495481","sha256":"1b6158427f4b2ca8aaf083e8200decede79bcdd2831f7f3c31a4b6afaa851d00","sha512":"a06f4d236a0522787ff3ab50e24d81e341620a9f3164479b510f1853d52a4a32b5f1a94ec57b0d4e9e11800be2bfc7ee567391d5cfca45a34d2b0324b281460c","ssdeep":"1536:OJ2R+xtJ4mm+Rt8F0moRKaEtJaXfWpdfVNth61DuRNgDhyZoDQDChouyvuz:C2YxtTnSFoRetJAch6tuvVoQ+houyvuz","tlshash":"2f93026b430e8c521ca57b5c552663e18cfbdc3f604c965b6ff1289f7662a3f1834898","first_seen":"2024-08-31T08:28:17.800874Z","last_seen":"2026-07-05T07:15:08.273054Z","times_seen":25,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/images/banner1.gif","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:42.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /images/banner1.gif HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nlast-modified: Sun, 26 Nov 2023 07:38:47 GMT\r\naccept-ranges: bytes\r\netag: \"809d9973b20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:42 GMT\r\ncontent-length: 80242\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":80242,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 365","md5":"984b617d9506234429a87c86ec486235","sha1":"cd93c4f1514a86ace8bc0cbc3cd534548af82758","sha256":"5f47f2a106b737a08aece0df012ddb8864831f33c41f3afb85e2ec829dc84264","sha512":"9e682de79b0275609de525734f7d4e723aaabbe726ca002564226d8cf1a09be6c7586b5994859d181e5360cdcc9992f0a9d3c84a097d3f642cd0a7c580ebc0eb","ssdeep":"1536:U0OizxTJ9ZIeZgA/zq+fr7PiUP1U+1vMt7lHJSFqRBHzJilnDWniPb3f6vF67SSl:jWebW+jLP1hUBMFqrJi1dyYYqvd","tlshash":"387302795aa14e584a54bfd51cbebf676ecf22c05e49b8833d4820c9eabc2510523c6f","first_seen":"2024-09-28T07:18:50.512067Z","last_seen":"2026-07-05T07:15:08.273583Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/images/ico.ico","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:44.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /images/ico.ico HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:45 GMT\r\ncontent-length: 1245\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1245,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5343c1a8b203c162a3bf3870d9f50fd4","sha1":"04b5b886c20d88b57eea6d8ff882624a4ac1e51d","sha256":"dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f","sha512":"e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949","ssdeep":"","tlshash":"7b21422992983814f69384a061f277c23f078286e66f1b68a023b263e4c26e281d33c4","first_seen":"2023-03-09T23:36:42Z","last_seen":"2026-08-12T03:25:19.758626Z","times_seen":63529,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lykwbor.juqhbwfolcekjd.top/widget/linkchat.1.1.0.js","fqdn":"lykwbor.juqhbwfolcekjd.top","domain":"juqhbwfolcekjd.top","tld":"top"},"ip":{"addr":"20.24.220.41","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:45.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hwcygjf.juqhbwfolcekjd.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 03:46:41 GMT","end":"Sun, 08 Mar 2026 03:46:40 GMT"},"fingerprint":{"sha1":"B0:50:C1:74:54:FA:CD:2F:D7:66:A6:7F:73:F6:C7:86:3C:62:49:AE","sha256":"B9:BB:68:00:D3:97:B1:28:49:9B:33:56:1A:F1:72:6A:8D:79:C6:7C:B8:15:CD:5B:59:1F:B1:F8:9A:FD:6C:8F"}}},"request":{"raw":"GET /widget/linkchat.1.1.0.js HTTP/1.1\r\nHost: lykwbor.juqhbwfolcekjd.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 26 Jan 2026 02:27:12 GMT\r\netag: W/\"6422ed22-4de3\"\r\nlast-modified: Mon, 26 Jan 2026 02:27:12 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, policy, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19939,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19912)","md5":"59b0c9f1c537544a364cc03e11815b34","sha1":"88c488181283b1ed9bf3e3c48ac056a312e47506","sha256":"afd9b6f3b5ea5286fe30818f301786af0f5c79890e873ccf2b8d0ce2c1e65fe6","sha512":"fa4961eca50806364cf62f8c817cde4dfaa9d44ac7e1a7cb7376b08a4047d9bf6f5660417872bf03b6cd0167f8987985806697c7bd5fc1f014c053ddbf2ab98e","ssdeep":"384:s/AmLO+73nnnnOGyME7k6yr3ExMdRQjFFk5o9WenZbFnIE2OeIy4jAZktY9xkSxM:s/hiannnnvTh6u3ExM3qFk69W8teh2Wa","tlshash":"dd92b034f748652ad02d407921be7a4c799a386f9b054aec30b2e5e39dfc95c3571a3c","first_seen":"2023-09-02T04:11:25Z","last_seen":"2026-05-30T15:22:50.69376Z","times_seen":39,"resource_available":true,"data":null}},"time_used":1595,"timings":{"blocked":696,"dns":285,"connect":202,"send":0,"wait":202,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/video/play1.mp4","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:48.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /video/play1.mp4 HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=98304-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nCookie: __vtins__3JLON4yX9HiDBPtR=%7B%22sid%22%3A%20%224c96574c-df84-58f5-870f-9152f31a0cfb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201769433945283%2C%20%22ct%22%3A%201769432145283%7D; __51uvsct__3JLON4yX9HiDBPtR=1; __51vcke__3JLON4yX9HiDBPtR=1a8eea6c-107b-54fd-a507-40846520dae2; __51vuft__3JLON4yX9HiDBPtR=1769432145290\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Mon, 27 Nov 2023 05:05:50 GMT\r\naccept-ranges: bytes\r\netag: \"04b8863ef20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:48 GMT\r\ncontent-length: 7594786\r\ncontent-range: bytes 98304-7693089/7693090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":114661,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"a03fed4d09c3ae87ff86ba2de2ad8ca0","sha1":"4f05edec246bfd5c53f2ce57bafd0bb457bf494e","sha256":"b4a97553f30f6190a44f3c07dc3ca6df1fcae69c7ee35474ce4318d750475f39","sha512":"196a14bd83e4563326600a95bc823e70c8c50d4919e1017e214cc8520dad5d5fda656c4cb08a4de244542ab1f72a5722aa68f8031c106b7b7c9f5224f55cbb9e","ssdeep":"3072:Ln4Nzm/DKbvG6BHQmj5ujZC1N1ESDGPxgxk2:L4M/DEG6BwdiYSDB1","tlshash":"f4b3021556e70c8aedb543bbf30d7d5aaf0048675b9d63eb8cda58202d782fd8d03209","first_seen":"2026-01-26T12:22:52.831139Z","last_seen":"2026-02-12T12:40:42.947538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/style/reset1.css","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:42.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /style/reset1.css HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Jan 2026 09:43:08 GMT\r\naccept-ranges: bytes\r\netag: \"303dc7af9587dc1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:42 GMT\r\ncontent-length: 4077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":4077,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b401995fbd288c3b4b2e8f8598374eb5","sha1":"137dc550b11321d1985fc60b912fd71ae6597468","sha256":"106bd94c0da60e38a1ba4022b9ea22a9c2527b657f8bbbf3f493b426fe24c5a7","sha512":"0a71aa2bead98489cb935e31a49957be6313617ec9b9fd09f5885602330704181739c29515a43db2ae5264859e05bed4cce1f839b1f5edebaa6b09d32b38273d","ssdeep":"","tlshash":"f7810f2196b35c41b40a88687f6ab785338c004b8a0fdd7c7fca778c8f851a56566b8d","first_seen":"2026-01-19T14:18:09.485132Z","last_seen":"2026-06-16T13:13:37.312803Z","times_seen":12,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/style/global1.css","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:42.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /style/global1.css HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nlast-modified: Sat, 17 Jan 2026 09:47:10 GMT\r\naccept-ranges: bytes\r\netag: \"27e357409687dc1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:42 GMT\r\ncontent-length: 1138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1138,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f6eac029bd5a825325159506a29c950c","sha1":"5d600d297be6f4b365017e34240129ab782e3e12","sha256":"0bf147f022f42363eed719745e4620d5eff85a3b07335562af1325d00eae60bc","sha512":"5132768db58374df15b242eddcb1cf7a74e446ab2d454699a5c933cf9e673659d9d22144febfbdfe3854706d7d3ec76ef24e9a583701607ee175363691391e77","ssdeep":"","tlshash":"f121acb39270420a7917cc5027016e75625c901784dfeafd8ee6289cddc65d651e338e","first_seen":"2026-01-19T14:18:09.475906Z","last_seen":"2026-06-16T13:13:37.315451Z","times_seen":12,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hcdream.com/berlin/customer-service/kefu78.js","fqdn":"hcdream.com","domain":"hcdream.com","tld":"com"},"ip":{"addr":"45.194.140.3","port":443,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:42.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcdream.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 10:58:22 GMT","end":"Fri, 10 Apr 2026 10:58:21 GMT"},"fingerprint":{"sha1":"8C:E9:2A:CC:61:DA:12:74:2C:5F:2E:4A:AE:9E:BA:37:8E:BD:A2:55","sha256":"75:C5:36:0F:07:95:10:5A:E2:40:A7:50:B7:1D:71:4D:77:0A:37:25:F8:2D:74:AF:D6:D1:3E:84:72:0B:EC:F6"}}},"request":{"raw":"GET /berlin/customer-service/kefu78.js HTTP/1.1\r\nHost: hcdream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 26 Jan 2026 12:55:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 21 Dec 2025 10:52:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6947d158-c1f\"\r\nexpires: Tue, 27 Jan 2026 00:55:43 GMT\r\ncache-control: max-age=43200\r\nset-cookie: SITE_TOTAL_ID=1f51ab9bd953865bae3d6b7bf26a6adb; Path=/; Max-Age=259200000; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3103,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"22258c2199930f806a7f779bf5eb8dbe","sha1":"7f8011391361c93bd1153b1ff509abb9881c75ae","sha256":"95726622caa1f472a5ea2083f6ca97d88abe843f2c19e1d2c252876d0397a7ee","sha512":"20c326393647b5c30c94887ffbacccbd70aa15f99aad3ece6a7036c1affb4e7e43b8729d1d4864f9784471ec6ec65069a66810d8b93ecc3b010e641f7e975c35","ssdeep":"","tlshash":"925140d6a9ba5521450311f95beb3b68713b646ffd06ee21335cc98c0f89cda902f688","first_seen":"2025-12-30T06:56:12.510622Z","last_seen":"2026-01-29T02:15:31.285408Z","times_seen":14,"resource_available":true,"data":null}},"time_used":1043,"timings":{"blocked":414,"dns":23,"connect":199,"send":0,"wait":199,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/images/icon1.png","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:45.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /images/icon1.png HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/style/global1.css\r\nCookie: __vtins__3JLON4yX9HiDBPtR=%7B%22sid%22%3A%20%224c96574c-df84-58f5-870f-9152f31a0cfb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201769433945283%2C%20%22ct%22%3A%201769432145283%7D; __51uvsct__3JLON4yX9HiDBPtR=1; __51vcke__3JLON4yX9HiDBPtR=1a8eea6c-107b-54fd-a507-40846520dae2; __51vuft__3JLON4yX9HiDBPtR=1769432145290\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Nov 2023 12:58:25 GMT\r\naccept-ranges: bytes\r\netag: \"802e43e6820da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:45 GMT\r\ncontent-length: 1344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 8-bit/color RGBA, non-interlaced","md5":"22d02dc1615d71f457a237d86e86a969","sha1":"729953a939c5f4763a3937a0174d13ef6e017ff3","sha256":"84204e649f1ed467a38dcc60f29f141c35f53ef2ad69c938edfb83c178994dc0","sha512":"234347e01878b83df82c7b7e03f0e980c4ac81ecbc82f3abcde2354d4242e9281299647321fc11c0dabd095b29218156548e4af2ba5fb55183f6eca45ee18e7d","ssdeep":"","tlshash":"bc2108649d9f11e48ca0b8532864621ab740e0c5d333a6042abb69ae8b1c73c8fb03c8","first_seen":"2024-09-28T07:18:50.46345Z","last_seen":"2026-07-05T07:15:08.280968Z","times_seen":22,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tudou.831365.cc/video/play1.mp4","fqdn":"tudou.831365.cc","domain":"831365.cc","tld":"cc"},"ip":{"addr":"103.244.151.206","port":443,"asn":135357,"as":"HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tudou.831365.cc/","date":"2026-01-26T12:55:45.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"832365.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 04:32:30 GMT","end":"Thu, 26 Mar 2026 04:32:29 GMT"},"fingerprint":{"sha1":"06:1A:25:8B:70:62:4C:D9:E9:72:1E:4C:E0:34:0D:87:23:BB:99:C0","sha256":"C3:52:E9:4E:39:11:C9:92:33:61:16:B4:F0:CA:24:93:55:E8:A2:90:FC:76:61:AF:0A:CE:E6:3B:C3:FB:4E:BE"}}},"request":{"raw":"GET /video/play1.mp4 HTTP/1.1\r\nHost: tudou.831365.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tudou.831365.cc/\r\nCookie: __vtins__3JLON4yX9HiDBPtR=%7B%22sid%22%3A%20%224c96574c-df84-58f5-870f-9152f31a0cfb%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201769433945283%2C%20%22ct%22%3A%201769432145283%7D; __51uvsct__3JLON4yX9HiDBPtR=1; __51vcke__3JLON4yX9HiDBPtR=1a8eea6c-107b-54fd-a507-40846520dae2; __51vuft__3JLON4yX9HiDBPtR=1769432145290\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Mon, 27 Nov 2023 05:05:50 GMT\r\naccept-ranges: bytes\r\netag: \"04b8863ef20da1:0\"\r\nserver: Microsoft-IIS/10.0\r\ndate: Mon, 26 Jan 2026 12:55:45 GMT\r\ncontent-length: 7693090\r\ncontent-range: bytes 0-7693089/7693090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":124919,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MPEG v4 system, 3GPP JVT AVC [ISO 14496-12:2005]","md5":"58da5d8c6da19fd7d1addc4dd6e7ea9e","sha1":"5a34a0341442c6b967285c4a45ba566118a8ba90","sha256":"c44fef3cb094a2949102ae5d90ccfe6e539089231864ce761c0b872c5ea07917","sha512":"acffb66b0830fd969fd136acaaf44caca48722a93a97200f3830c42c0cf48f13e0fac932ef6a591003ff5723190104b759f69ec66f84bbb7fee751ff5f2b42c0","ssdeep":"3072:HQI1N10s4gqSy1HyOxM1nXUoy7n4Nzm/DKbvG6r:B1N10s2zHyn1XUD4M/DEG6r","tlshash":"55c3121754e2840bde30c8fbd0d03a73da015761ba6973eb2599be0479357de9023ee9","first_seen":"2026-01-26T12:22:52.857436Z","last_seen":"2026-01-26T12:56:06.998173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tudou.831365.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-26","alert":"Phishing Block","trigger":"tudou.831365.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}