{"report_id":"1f7e5063-5f9c-4008-abc1-77f5b84dfa6d","version":0,"status":"done","tags":[],"date":"2026-10-07T08:07:36Z","url":{"schema":"http","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":0,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"wordpoints.org/403.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"title":"ERROR 404 - Not Found!","dom":{"size":4996,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1025)","md5":"249d4db05e42b5005371aea61da99e9a","sha1":"642f16a78d71d68bebcd79115192f191263a486d","sha256":"f55b2fbd4cdf7faab7261afddc878a4846b4a08a511cd7b7fcfac2c9a9e1ed54","sha512":"b4729d6c36727a8a8c1a93c13e151da57d4210ad75bd1de188c7a9c65627727a5fd26dc8dec9404f6bc1efe433f66a22f85ad1ed0d5ad00e916a14b0dc770bea","ssdeep":"96:jBuR8NxSXwXjPiSEC9D2BTR+UqnFowr6rt9G2yxSXwXjPhgGW3xasyOH4:Y8NxSXwX+ST2BTR+UqnFoW6x9G3xSXwH","tlshash":"90a1729f5c93915269a7b8a42ffae30961684403d108cd1bb9dcd5dcef84fd88ca278c","dom_hash":"domhash71083452b8690bca31c4a6e21fe77ec6","first_seen":"2026-09-22T12:40:05.629453Z","last_seen":"2026-10-07T08:07:43.931687Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":0,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T08:07:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-01-09T10:28:12Z","last_seen":"2026-09-30T04:04:25.255471Z","alert_count":0,"request_count":5,"received_data":7253,"sent_data":2418,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"d367tkzt95ytm.cloudfront.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-08-29T02:32:18.947697Z","last_seen":"2026-10-06T01:51:10.328083Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-10-06T20:54:02.662213Z","alert_count":5,"request_count":5,"received_data":0,"sent_data":1680,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wordpoints.org","ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-06-25","domain_rank":0,"first_seen":"2026-09-03T22:39:27.557382Z","last_seen":"2026-10-05T16:54:19.584803Z","alert_count":90,"request_count":45,"received_data":1222624,"sent_data":18107,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"wordpoints.org/Plugins/403.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc99a3365c66963bf6d8734b6a04e0d3","sha1":"1eaf7926da12fc34618d196f6a9853021ab02536","sha256":"daa8ca529a12933e77240bb1099016e402757302d2430b987d201cca48431f07","sha512":"1be12a21313c20768d56f99f43f8748b089506175be66dd16a4a530720313af28aaab08c2ff6e9ca720e8fd31eb41d9d93b0524fe05163b1b357dc5559f556b2","ssdeep":"","tlshash":"f241ed5df4e374b22837301c6b8fa00a74f1547b688cda007d0d9ac26f824a686b77ec","size":2141,"data":"","first_seen":"2026-08-09T06:58:13.67174Z","last_seen":"2026-10-07T08:07:44.011943Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/403.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1790530df2afa0867455558562456a","sha1":"02fc122f45c9aa01df690d4d3706971ff59192fd","sha256":"9b40601d3f8f1f3ff1949554a58776f2b100c48cec8e7317498ba14c9a03b5bc","sha512":"93f2b71a759cc104867a90edac085d07b6c50a7c7e9b5e92274e57fce5b289c61f13ca4a175e7ae53f20893616f60f9b1cfd0d3b76780d3b037a1ab0e02a051a","ssdeep":"","tlshash":"27f09e6fdc41a9545bd225b8a7efd748d05e0428d019c447acd5c4cd2c38fdc042534c","size":502,"data":"","first_seen":"2026-05-13T23:49:49.138519Z","last_seen":"2026-10-07T08:07:44.033672Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/tj.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b97d45d1074ff244e974c82810eb7a2a","sha1":"75ca85653c75678b0bc24ce51ae13100c99bba85","sha256":"01913864088cb746ac003085df922b025d9ca79ac5901440b3726ff3cc1f4670","sha512":"062872df604ce76a2263fa6342763638008d998d19eb77413ebdaa5642128790304bdcd6f520d8f3d428aee6e0dadd9ef5fe880d455f9b286094ec758274a7f9","ssdeep":"","tlshash":"d3f0c05f7c05f2106751393633b7da9ce9af14252009c8875cdac4ac2c28ff80116b0c","size":554,"data":"","first_seen":"2025-09-18T02:31:27.203568Z","last_seen":"2026-10-07T08:07:43.974769Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/403.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ab782f9427da6f405ace3b0485baa21","sha1":"719c5dfe8820f716df4546a2b6d8bf3ce4406f10","sha256":"5773290f21a746c32437eff97cd88ecd04ac99c18f5eb1d1413628d30a0aa488","sha512":"ef8b2e0af14eb7ebe20e0b6a8e683e6dc5f08e669012abf068ce6c4641545fbfe4042d74e4307b52c61a39a787c9bbbf2d581acd43ae3a1bb43a25e8c1e14e83","ssdeep":"","tlshash":"53f09e6fdc41a9545bd225b8a7efd748d05e0428d019c447acd5c4cd2c38fdc042534c","size":575,"data":"","first_seen":"2025-12-18T09:12:07.927298Z","last_seen":"2026-10-07T08:07:44.035036Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/ajax.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae1625f00bcb78bf9e9c27ebedfe26d7","sha1":"9f0ee94e3bd3b2fb569441621e2dac7dd21d66fd","sha256":"09decd657ef4c873beb6ecc86f403132e47c126f870cbea1903d1ea7128964d4","sha512":"afc08f97d0908069e23ed2e17147bc922a452cdc90a00792d9e80f5294fa4269241ac071712c8ed241e1cc5cfaa0df8fc4f05ce050eb8b529123131e1cdd7fc7","ssdeep":"","tlshash":"48b012161c42fd9040280c9ac135c86460fc9114d110d94613fd041c1794fdc0c06c45","size":96,"data":"","first_seen":"2025-01-23T11:49:05.260358Z","last_seen":"2026-10-07T08:07:43.980374Z","times_seen":2135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"d965b416440517f23df57f36865017fa","sha1":"5dbb8a9e9aa74de36f4a0d4e062658e2125343c9","sha256":"64eab5b4485bd92de7da485f42929ba551b7dee1a1a8fc7734b6357717e2dfa4","sha512":"5aadb33545dd702d7165b566552108985a909ba5e4fc9b6f5e8fb419daef903d0028397ce65a04eb9795e79d440a8873d428819c60edc8f5ac93ac3ac3350aa9","ssdeep":"","tlshash":"5c4136d975615d790fe932af6cff071e00224105bc9b931594c98ac1673cf8b9267b8a","size":2170,"data":"","first_seen":"2025-08-01T10:51:10.081406Z","last_seen":"2026-10-07T10:23:38.414431Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/tj.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8d48ed4f849d3a537e0225d3230208f","sha1":"4f8646de1709593d2b4ab56c6caf7c0fd1177fbc","sha256":"98ebdd779e3e1bbdff110cdb3f1b64499478553b072ae12233727b0e7ab2cbb9","sha512":"a18fc25e80f3e39a682cea479fe81c20f6f8b0ebae9ce2e84d9af08d5186bc1cf9e89e14c52580ba0d962291ae291cbd8ba74d42894f157f6024b44af8c5bf58","ssdeep":"","tlshash":"4211c09e7c05e25467973c7a23b7ddace9ae0032100dd80665ebc0ed6d29ff90126b4c","size":1110,"data":"","first_seen":"2024-12-07T07:30:44.931892Z","last_seen":"2026-10-07T08:07:44.010497Z","times_seen":2054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"efdb74bc4231a6411a99828ec65fa9a0","sha1":"9bce56ce805a17e52b814493f894793c77f3bc4b","sha256":"1f51a4a680608ce210e46c47261df7581b9c87053fca8c6f61bbdedc556dd1b5","sha512":"b25bc9dbb8cac90684e7d5774f506d22ef3a09b69310543dc295c55f631094f161a082399af0e9f630060ca201504c0e9ee4560a77e8a741152b1ee9c36a87fb","ssdeep":"","tlshash":"2df059aed841a258578628bc57dbda48d15e0038d00dc806a4d9c4cd2d28fe4042234c","size":507,"data":"","first_seen":"2026-10-05T16:54:22.340491Z","last_seen":"2026-10-07T08:07:44.036933Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/403.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"d965b416440517f23df57f36865017fa","sha1":"5dbb8a9e9aa74de36f4a0d4e062658e2125343c9","sha256":"64eab5b4485bd92de7da485f42929ba551b7dee1a1a8fc7734b6357717e2dfa4","sha512":"5aadb33545dd702d7165b566552108985a909ba5e4fc9b6f5e8fb419daef903d0028397ce65a04eb9795e79d440a8873d428819c60edc8f5ac93ac3ac3350aa9","ssdeep":"","tlshash":"5c4136d975615d790fe932af6cff071e00224105bc9b931594c98ac1673cf8b9267b8a","size":2170,"data":"","first_seen":"2025-08-01T10:51:10.081406Z","last_seen":"2026-10-07T10:23:38.414431Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/so.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0cafb9511fdf8b72bf10d7196b09cea","sha1":"f5833901027245cfb8eba3fb2c552922f223a555","sha256":"2a9c9562a8509bbcda49a8a442fc2f69305a18b089d331fc616e57b5708d3b0b","sha512":"e450a72f7762a8234d5d838fbcace0455a5f933bb56d6b29e20e9a578dda0ff6a51d031a5591c11d56eba149434c5649abe3f1864c6866c20b8bd9000d563cd0","ssdeep":"","tlshash":"8401126e6e56fa2055244ddce971eaa8a0fda135f555ce6c85ee082415c8fcd090ec44","size":731,"data":"","first_seen":"2026-09-22T12:40:05.664447Z","last_seen":"2026-10-07T08:07:43.955662Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/win.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b8e1e42862b0dad8dd6ed56f4a1bdb0","sha1":"262deef52406f04a9de3a05a807ca30c412c159a","sha256":"24396949875d6cc5701d903220e11537cf2b70a3afc245eac60f37002d66f923","sha512":"b1e895fa8a7823e991702889232d99f1cc91a2c37d898d4ab4303d3899989822e37a756448b16c84d99833db84c6c120e5edf630e96c401f3bedd0ea38ad6af8","ssdeep":"","tlshash":"30718edc77e6e25b6b8c1da3fe059fea11b6d57b90c17207879cb98d20f420bc668045","size":3563,"data":"","first_seen":"2026-10-05T16:54:22.302481Z","last_seen":"2026-10-07T08:07:44.005973Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/apps/CaiJiXia/cjx.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c796c9667d148e3d1d960eae58ca7e3","sha1":"4921f0df8d5ea9f4b6dbd1c6cad4bbc821374e89","sha256":"c5295e9bc5d73b08ca570e9b9aed94742d70ea16833fe3a9f11ae266225ed7a8","sha512":"58452cfeee70da91c0a40dabce71fbe2c5f2e1002d4b21ec08a5c9a9fd11e99cf3f7c301c6600c48228fcbc39d46738ac24a0baf4cda510e0cf1a17f36194d61","ssdeep":"","tlshash":"2b5162adef5238b306e27ae11cbdc72d105404e6787b8271ec989e8439f0ae44d6b353","size":2488,"data":"","first_seen":"2023-03-07T15:49:45Z","last_seen":"2026-10-07T10:23:38.381566Z","times_seen":2084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/plus/index.php?aid=8","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"697c37804807f715cc8a9e7e47aeabe6","sha1":"f92c1abb436942ff4cf1f9e20e776d0da396765e","sha256":"4143d0f2acaf9b971c69b52061b429c8360e770a41d8743f7d11619af7832325","sha512":"a802cd8a02baba0153c25c25b283a4722fd4dc4e32ad6b8efb5c47920fc36b2c5ed35b77b74cb842dd3d39e9a09b479266416049c7fe8ae51a1a346c893c6abf","ssdeep":"","tlshash":"92b012520e5ed22060040440b471c479567c90349701c904408b48940005be80c06f00","size":89,"data":"","first_seen":"2026-07-31T06:30:05.397529Z","last_seen":"2026-10-07T10:23:38.339465Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/ts.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c23f793c4e7a9261dd8dc0852e1ad642","sha1":"8ae836114c1a95c5dd419d57e816b38a973ca5ce","sha256":"48e0fdb321f1d298056bddbc82f699d634870fae3e0d363e5b47dd75c280ee1f","sha512":"968f1e457d219dc6350bb2093e2131cc760f42eeb727fd0a5f98195c324459d3cc327872d1d264c2a9a6f85178c30f098924233e664bd4fb59d97b3d5be096e5","ssdeep":"","tlshash":"73e02b6e9c260af4667116bd853fa818f1aa113f4040d102b44cfc021f30d974a1dee4","size":421,"data":"","first_seen":"2023-08-27T19:31:17Z","last_seen":"2026-10-07T08:07:43.952952Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/403.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad7275f4a7ce3e6e4cd1232867349a9c","sha1":"50bbc7727c236c9339e15258fcd8e350f4879519","sha256":"d54690f5ac17e8a419581062b90119d58f2f39128d2555a539b5820d1145d141","sha512":"b4238ce4ad3b17c5330ce910473459c48dae30aa331fb0984c11f1bbdf6180d1745d2e0675e4ab8e1495c2ef3c22166a66636eb7c16e0bf9d9f0e272799e393b","ssdeep":"","tlshash":"1601261d97e291b1ee2371f51b4fe406ba3a14430008ba0bb80d0b94ffc583887b6f80","size":823,"data":"","first_seen":"2026-05-26T00:05:21.157205Z","last_seen":"2026-10-07T08:07:44.038078Z","times_seen":312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d54f9f124c7d1ae0627c4609e8e16ab7","sha1":"5aea4ed58b678983b4b002331f0c7090de744f7b","sha256":"18a3ad6c59590cc66edb1e48f711f64bbb4f56675b65c6420355d629c4dab0a5","sha512":"d9d504d8188f8f85c8e42fb2e80a79306692c1c620a1bbdc87716f23b1de1ef81be0616dabd4a0f71679d8dafd2c828b3f893373258b0bc48a52340a5e2041c5","ssdeep":"","tlshash":"aff097aeec51a1986ac339f997abd689e0ae0124d00ec813e5d6c5cd2e3cfc9042134c","size":507,"data":"","first_seen":"2026-10-05T16:54:22.341856Z","last_seen":"2026-10-07T08:07:44.039284Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5840e57d78270175c18ab6c3cc29f245","sha1":"c71d210591d87ebc86faa6f70214dc2189c11e4b","sha256":"576a8ecbcc1e3c54920162876d57e5a1c8ed3415191c6d1c0c223f43a9a07d51","sha512":"e8f545cf7e0808925422bf715e99bc1b9e49bd18a2c9531b4217ff65d256b8c62d9ae84d045ee33eea54da990ef6f34c87065507e9daab10bb175acd5009337f","ssdeep":"","tlshash":"67f09e6fdc41a9545bd225b8a7efd748d05e0428d019c447acd5c4cd2c38fdc042534c","size":507,"data":"","first_seen":"2026-10-05T16:54:22.343028Z","last_seen":"2026-10-07T08:07:44.041404Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/ts.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"becfab42c511b0c79b9f9b7297480966","sha1":"496cc761774031cc00f0d8115f1ec47ef79a9f46","sha256":"1a8a8edd8f92077e6b68d17f8ed8a66a4e96c2f15a8c69baeaf6cb1552f4b756","sha512":"dc982f939e660872732e977461595076a05cf6b6732344604b4e4c40d1ca9ddea446dd02792fc67e55d949ebddb17751567cc3df35f74a29db791379229f5bea","ssdeep":"","tlshash":"52e02b6e9cb316b47a4114ba452fa418f1ea512f1044d402754cfc014f20ea74b1dae4","size":410,"data":"","first_seen":"2026-05-24T15:51:44.163332Z","last_seen":"2026-10-07T08:07:43.982309Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"pc","filename":"http://wordpoints.org/Plugins/403.js","line_number":48,"column_number":17},{"level":"log","text":"Region check skipped:NetworkError when attempting to fetch resource.","filename":"http://wordpoints.org/Plugins/403.js","line_number":28,"column_number":21}]},"http":[{"url":{"schema":"http","addr":"wordpoints.org/skin/js/jquery.min.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.978Z","timestamp":1791360423978,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.min.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a7d0560-791\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1937,"size_decoded":1329,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"baee0d263684f83f0043edc317f46b8b","sha1":"075ea54274be1075746dd380f7a5cd8db05e68ee","sha256":"b9fb920b76c24a639a2088f4de1a797b6d3738a89037cf8c77a942f9bc517a5d","sha512":"8079c4ce92dbc49e093303865cd6d647455e5a1b3e779192bd04b2e2d9b7a0bcd318431e50276815de7f799d5047321bd708ae231da2ff882dd2a138c2978f2a","ssdeep":"","tlshash":"3941942683901313b07ad94279b2dbd57a2141cbb6420abcb97129f3dacd07253223dd","first_seen":"2026-08-15T11:14:16.129897Z","last_seen":"2026-10-07T08:07:43.933552Z","times_seen":29,"resource_available":true,"data":null}},"time_used":747,"timings":{"blocked":487,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/images/logo.png","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.000Z","timestamp":1791360424000,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/images/logo.png HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 30 May 2018 00:29:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df07b-11c2\"\r\nExpires: Fri, 06 Nov 2026 08:07:06 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4546,"size_decoded":5125,"mime_type":"image/png","magic":"PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced","md5":"e8848b2f61bbc3bb81658301b05abf45","sha1":"b2058a2b91b91df8dbeabb69959d2d03ac8985b3","sha256":"fd37b94e7ef320bff9c9c98a9a47ade5ff35b974fd087d6c4bbb5b27992e10a1","sha512":"5c2c6e1daec81b63a8cbdc274ce7d6140df07fc526c0a52b643a52b7112a792a024e899001de0200bc80b04a1c4b351bccf2b4d6ec16cda1d9bb8d4ee9281b29","ssdeep":"96:KllcHitlIxv9vk7C1+I4wWHLihk/xcWfg5mvkw0h05JO3ofwuqaf:xIIHUCD4wadvfpPO4fwSf","tlshash":"46919f8f6584067a081906eea96bdb0a4a2b93c0c3555d1deedba34fdd20d132c3a746","first_seen":"2025-09-27T10:32:13.177987Z","last_seen":"2026-10-07T08:07:43.935197Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2574,"timings":{"blocked":2375,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/uploads/180712/1-1PG2162150P2.jpg","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.002Z","timestamp":1791360424002,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/180712/1-1PG2162150P2.jpg HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 12 Jul 2018 08:21:49 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b470f9d-73f5\"\r\nExpires: Fri, 06 Nov 2026 08:07:06 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29685,"size_decoded":29776,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 420x300, components 3","md5":"0df41cc0cf175b93ed49dd22611ff988","sha1":"1918560d9c1eab669379eead62c57b190cbefcf8","sha256":"411d7d7b0f95d27fb0d6d18ab9a1426bb59182e4eea07436c2dbd13993b5023b","sha512":"28393e7a4e0e259a695ed93b54f37db80b2856f3051ca28df38f306a169fe6964e212464e294da211ad7801c32d74379374d9ed2bce8e796e8637e85ba296f22","ssdeep":"768:lXykdZPTQgPKt0pkYvb0Vq0jSZkSSCWuSFtrh3m/:1DTzwwkSMqcC1SFVC","tlshash":"d2d2f1f93feb524a1d308a30428e59066fde8f474b43e8668c0607600f9cfa59b472ed","first_seen":"2024-08-19T19:01:03.504691Z","last_seen":"2026-10-07T08:07:43.945065Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2632,"timings":{"blocked":2375,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/images/qrcode.png","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.006Z","timestamp":1791360424006,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/images/qrcode.png HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 12 Jul 2018 07:45:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b470727-6ec5\"\r\nExpires: Fri, 06 Nov 2026 08:07:05 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28357,"size_decoded":28831,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5c8d50c1c94c228357a505cd4189615","sha1":"3192050cf26d573cbdc1411503641b302646e348","sha256":"07d1d9dc855ecb1727ac06c2e3b59787fb870a27cf132f244f4a4a6280fa8ab0","sha512":"2803260cd5aac302db6729ce4073e7aa8962260ab5a98b584c1107a883f2494aaa48bcd1961ee59d36bb705e8f4959a947b0848521956d49375ca8736808cee2","ssdeep":"384:e4/jCmRVEdieUOvCK6PLlS+BskKhBbPAJYLTDLfsZUyAxiyp1yGilAgAWQuxqnGV:eKYPhvB6PpSFhdPAJMXLDhxiyJ+QuyQn","tlshash":"80d2e0d9db2d04e2a8a8bcb621600834588587f9d74e248b1ed6623f5dfbc5e013a19b","first_seen":"2025-03-07T16:53:12.444822Z","last_seen":"2026-10-07T08:07:43.946381Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1498,"timings":{"blocked":1240,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/favicon.ico","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:08.140Z","timestamp":1791360428140,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/403.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:08 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Wed, 12 Aug 2026 23:43:14 GMT\r\nConnection: keep-alive\r\nETag: \"6a7d0512-10be\"\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4735,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"b1b891d2f48e8efb4dc81e7838f2c552","sha1":"6e6073e95a8804cb96e79f355ff8a297fdea9d60","sha256":"7c5fa4e85828426fe0625af1c7d4ef83f7d78ef2806cc5e0c08d5b27a7d95596","sha512":"4475da2d683cd0eedcd722c6be6fc4687378b2cc9d5e535e04c0f9090e4496902472f00951633abe798306e4c5f6ba60624ce16c538f0c364cdc9121007850f0","ssdeep":"96:E2UyJ/P6JScm5PdJcAocDuM/d3eOWHyGft8JcToPFcHTc:Efmb5xm4VqS0tC","tlshash":"0d9112eca663ec93c400f6ff8a28a6f085c65cb1b553f7e61438b919843547dca12e87","first_seen":"2024-12-07T07:30:44.976335Z","last_seen":"2026-10-07T08:07:43.948433Z","times_seen":2394,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/custom.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.988Z","timestamp":1791360423988,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/custom.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:29:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df081-1035\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4149,"size_decoded":1926,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e73b7e395ea5af033f5a6a970c1f347a","sha1":"2574022df3bb5109db3172d4ef0efc08b558ecaa","sha256":"5db89a7aca8d284a690b7200e9b86a0478f54141301c074cf70dd30ae9410e86","sha512":"60e2fbc78120d52a1c0b87ef377ccae7c701350635879aa5ebbc9cb6ab87868029467813fefe7bee461efcd0078bc5601b8c9ac8592616dc71ca8defeef1b91d","ssdeep":"48:9TcuuMqy0M4+Jnx0kkl9Gla31F284020H7wNrvLkp+irQltG0NMFidzQGzy3f0nN:9cuuMHhmNG02vAt/Gzsf0nbJwmD/v7N","tlshash":"ef815048b5be58254273281aabbfc605513f6023ba4b98d3f44c03a52fb536e67c3788","first_seen":"2024-08-19T19:01:03.498765Z","last_seen":"2026-10-07T08:07:43.951421Z","times_seen":8,"resource_available":true,"data":null}},"time_used":981,"timings":{"blocked":782,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/ts.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.277Z","timestamp":1791360425277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-6.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:15 GMT","end":"Sat, 02 Jan 2027 02:51:06 GMT"},"fingerprint":{"sha1":"71:AA:B2:AB:13:43:B4:24:14:D4:17:18:6C:6D:8C:8A:EF:6C:D2:1C","sha256":"9D:B8:09:0A:5D:43:59:9A:AE:6C:F3:99:ED:13:80:FA:DF:21:7D:65:AE:F9:B0:47:DA:3F:24:41:84:58:15:5A"}}},"request":{"raw":"GET /ts.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 421\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC5FDAA0DA1A1373277958C\r\nAccept-Ranges: bytes\r\nETag: \"C23F793C4E7A9261DD8DC0852E1AD642\"\r\nLast-Modified: Mon, 04 May 2026 14:04:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16067097553053625117\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wj95PE56kmHdjcCFLhrWQg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":421,"size_decoded":982,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c23f793c4e7a9261dd8dc0852e1ad642","sha1":"8ae836114c1a95c5dd419d57e816b38a973ca5ce","sha256":"48e0fdb321f1d298056bddbc82f699d634870fae3e0d363e5b47dd75c280ee1f","sha512":"968f1e457d219dc6350bb2093e2131cc760f42eeb727fd0a5f98195c324459d3cc327872d1d264c2a9a6f85178c30f098924233e664bd4fb59d97b3d5be096e5","ssdeep":"","tlshash":"73e02b6e9c260af4667116bd853fa818f1aa113f4040d102b44cfc021f30d974a1dee4","first_seen":"2023-08-27T19:31:17Z","last_seen":"2026-10-07T08:07:43.952952Z","times_seen":206,"resource_available":true,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":39,"connect":209,"send":0,"wait":220,"receive":0,"ssl":637},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/lightbox.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.986Z","timestamp":1791360423986,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/lightbox.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:29:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df077-3a18\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14872,"size_decoded":4423,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (591)","md5":"aa294d7a6febff508aec6691684137c4","sha1":"fa313b686a1b3d9b80cc5d2063d91969848a142f","sha256":"97034923921c5b085988d368e84feff2fe422cd0405678f9bcc05270cfa68eaf","sha512":"ff60bbf45bd1544c29224c62b5a4b8e165731c1bea846b9e43bd367a4101e3993d57467d547b5d10f78f0bfc98b003d27553d0eceefc4c7bc1884e1ae9d32d0e","ssdeep":"192:+v6fWTzIkaWmDlw6f0rpv1LlD7ybSqyaTXKCl+B+fqy+EyhSqhzniNcqLcqya4yJ:G6+7mhf0/6KCYB0LjVH","tlshash":"ec623019bbb61025d96734ab2f4f5264677a5217bc0bdf187c2c93d85fc01308ab6fa8","first_seen":"2023-03-07T13:18:06Z","last_seen":"2026-10-07T08:07:43.95373Z","times_seen":356,"resource_available":true,"data":null}},"time_used":960,"timings":{"blocked":760,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/jquery.themepunch.tools.min.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.989Z","timestamp":1791360423989,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.themepunch.tools.min.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:29:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df07b-180cf\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98511,"size_decoded":34605,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25522)","md5":"ff2be50fbaaf60e26cd022218f639822","sha1":"dc9889af0e3d11dc79521a8d7c231d7c39ffbfd6","sha256":"bf47bc03c1c1ff93c041eb5a34e4c9471e4e64e0e0c672599f996fc7a972b119","sha512":"9eca002640ed04243692c1dced07299fe807cb68eb6b2520b576e8ff771c94936537944e2b4ecae3c65d87b22102b8f372bd4dafff37de67ddb948d26aebcec8","ssdeep":"1536:nxW4OHKIJrO2XQFCPNw+1WzGtYa1Jse0UnCzcf28I9H3+jM1NKzA8ifRVy9m:nPI5a+w7zGWa1J7nCz/8I9+jyt+m","tlshash":"27a33aca7251702145d721e5917f0683723ba8aa740e892cf258d9de3d3c9c922fbf76","first_seen":"2023-03-07T12:07:36Z","last_seen":"2026-10-07T08:07:43.954639Z","times_seen":1741,"resource_available":true,"data":null}},"time_used":1165,"timings":{"blocked":960,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/so.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.200Z","timestamp":1791360424200,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /so.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 731\r\nLast-Modified: Mon, 24 Aug 2026 01:13:10 GMT\r\nConnection: keep-alive\r\nETag: \"6a8b9aa6-2db\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":731,"size_decoded":1258,"mime_type":"application/javascript","magic":"HTML document, ASCII text","md5":"b0cafb9511fdf8b72bf10d7196b09cea","sha1":"f5833901027245cfb8eba3fb2c552922f223a555","sha256":"2a9c9562a8509bbcda49a8a442fc2f69305a18b089d331fc616e57b5708d3b0b","sha512":"e450a72f7762a8234d5d838fbcace0455a5f933bb56d6b29e20e9a578dda0ff6a51d031a5591c11d56eba149434c5649abe3f1864c6866c20b8bd9000d563cd0","ssdeep":"","tlshash":"8401126e6e56fa2055244ddce971eaa8a0fda135f555ce6c85ee082415c8fcd090ec44","first_seen":"2026-09-22T12:40:05.664447Z","last_seen":"2026-10-07T08:07:43.955662Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1060,"timings":{"blocked":803,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/403.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:07:06.826Z","timestamp":1791360426826,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /403.html HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 12 Aug 2026 23:44:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a7d0560-e60\"\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3680,"size_decoded":1867,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"29655c1406180894834b9ba46214b4c6","sha1":"49c30deff98195c68ccc7706b16dabc8a1183ee7","sha256":"2f02f30091fb71ca19cc3b21e48b4f85256c7336b02fbbd8d894510bff4f5bab","sha512":"dcd8be6174cd55bc6e9894b4499b2de3303d0c4071bad9438b66d149ca3604fb4a20fe3933d51e8293970e551921806cbe4dc48e4d0c85b9b866a623ecd3d40a","ssdeep":"","tlshash":"5e71339f5ee31052796bb0b01fe5e70925248443d109de1abacc66a8dfc19988de3b8c","first_seen":"2026-09-22T12:40:05.666958Z","last_seen":"2026-10-07T08:07:43.956623Z","times_seen":8,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:07:03.428Z","timestamp":1791360423428,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:03 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 07 Oct 2026 08:01:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6ac5fc59-7c93\"\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":31891,"size_decoded":7448,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (908), with CRLF, LF line terminators","md5":"267521e9c9ac22100c975ccadfe0da0c","sha1":"20cbc5a582ce29d799352b9c8b7db364c4de17ad","sha256":"ed14efb3658f86b001aef0ba2b9684c189b431e4966a3bf3f7acebe26432a1e4","sha512":"069c54d3f0721044eee0c4252a7911e21ef2f739cd805ddbb221240dc36ceb95f9ff02b2b78704778851ffc30fa4b2202ad258784eb64e8da7eddece7af2ed77","ssdeep":"384:q6Gy6w/7tLMWpFNL/lZRBxBmTsm6fREY2mQOQMHpSGgKJtgrydcqcoj/2T:Yy6w/7mWpFNL/lZRBxBmTsrLkKJe","tlshash":"8ee25220b4e25b2701538be566253b35efc1e287ca1b5a4973fc46e7af82e9ddd03106","first_seen":"2026-10-05T16:54:22.28657Z","last_seen":"2026-10-07T08:07:43.962009Z","times_seen":4,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":5,"connect":198,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/settings.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.975Z","timestamp":1791360423975,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/settings.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 12 Jul 2018 07:46:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b470764-12870\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75888,"size_decoded":10771,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"52566f429e9e8b8b1b7daa76dd530ee5","sha1":"42c58274661e8220c9eb2683178b4e167ccc9ae6","sha256":"7cad76cd3acd61705361c4c5c4eda7bb6ffc8a78b8e5a1054815b246fcd3f2ee","sha512":"e5400138237f72d00f2ec11f538aa0005d384f632c2787277a3f3e2655c6370ae7811572c907be6353ae2facbe8961c88bd172eba578713da0bbda9395fe85bc","ssdeep":"768:qkuhIH8r0HjiI3nKtBe3WoiMPpojyMFl9tIlmWytLTEpuScdUrDDuP5OiJ1b/cDX:WIH8Wp3WoiOosGTb4CbNKEszrDJgJ1W","tlshash":"0d73b638d6556c86b203ba58b7f25ff46f2d02765e0746acb0a3396cd34d9ac1c623d2","first_seen":"2026-05-20T07:02:55.451971Z","last_seen":"2026-10-07T08:07:43.966977Z","times_seen":5,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":474,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/parallax.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.983Z","timestamp":1791360423983,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/parallax.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:30:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df08f-730c\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29452,"size_decoded":5636,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (322)","md5":"e65a4d004ed0754de240bb2aa599f6a6","sha1":"6e0ca0a8dbd6b29ede580a305e5416c923e3bc5d","sha256":"dab51567ee742e991811d3b02a5de01bc6399580a15727a33d4d8dba2bed1155","sha512":"63ff672ec54a3450632e849e3c5ef272c71782218e781c1b4e55c09ed87cca1a01351121e8b8a3dac6b34278e7b18a18791e76a2ff80aefec3dbcd23c8ec5217","ssdeep":"384:w5f4ldd/5UHXMdsIKylkpZA5UvROkUSzCgNvLr:w5e/5yceIKOkpZA5UvROkUSzCO","tlshash":"fed21e0c26e51426a5abb33f8eef2284713e5017080bd92cb4ac66d56f5692d51f3fb8","first_seen":"2023-07-07T00:15:31Z","last_seen":"2026-10-07T08:07:43.968702Z","times_seen":16,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/jquery.themepunch.revolution.min.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.990Z","timestamp":1791360423990,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.themepunch.revolution.min.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:29:53 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df081-1b9f2\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113138,"size_decoded":27380,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65205)","md5":"0801758f13b2e6ddcf5cb4d099da8c21","sha1":"b5590446180084aae78c71f40fca4824a81a0aac","sha256":"770f981d80f084f2d2271a8c751756449a11b5ccae8525459f6cb1d37ab89453","sha512":"a5638d640c48167837160dbc8885afbd41e87a284486253f01f9eb3b290acd073a3817753cbfb9e0e04b7b37516e3d67d0c8e5a6127fa34f244a7eeb7a081c97","ssdeep":"1536:TjM377PlyX0JwMl1tdKcRbCGOA89TgJX9tnw5aKrb49wPS7Kg7K7kRwKhK/M674E:Tj0zn1KRjb748jpoImsYgv","tlshash":"72b32a297640207696dbb267825f91092372bc3b8e03c90576b6d4700fb5c8a7f7af9d","first_seen":"2023-03-07T01:36:42Z","last_seen":"2026-10-07T08:07:43.973674Z","times_seen":1507,"resource_available":true,"data":null}},"time_used":1490,"timings":{"blocked":977,"dns":0,"connect":0,"send":0,"wait":259,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/tj.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:07.053Z","timestamp":1791360427053,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/tj.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/403.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:07 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 554\r\nLast-Modified: Sat, 26 Apr 2025 08:26:16 GMT\r\nConnection: keep-alive\r\nETag: \"680c98a8-22a\"\r\nExpires: Wed, 07 Oct 2026 20:07:07 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":1081,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (554), with no line terminators","md5":"b97d45d1074ff244e974c82810eb7a2a","sha1":"75ca85653c75678b0bc24ce51ae13100c99bba85","sha256":"01913864088cb746ac003085df922b025d9ca79ac5901440b3726ff3cc1f4670","sha512":"062872df604ce76a2263fa6342763638008d998d19eb77413ebdaa5642128790304bdcd6f520d8f3d428aee6e0dadd9ef5fe880d455f9b286094ec758274a7f9","ssdeep":"","tlshash":"d3f0c05f7c05f2106751393633b7da9ce9af14252009c8875cdac4ac2c28ff80116b0c","first_seen":"2025-09-18T02:31:27.203568Z","last_seen":"2026-10-07T08:07:43.974769Z","times_seen":525,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/uploads/180712/1-1PG21622291Z.jpg","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.003Z","timestamp":1791360424003,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/180712/1-1PG21622291Z.jpg HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 12 Jul 2018 08:22:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b470fc5-655d\"\r\nExpires: Fri, 06 Nov 2026 08:07:05 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25949,"size_decoded":25686,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 420x300, components 3","md5":"203fbdf93d36455575b2797b504df80b","sha1":"796b6a1428d37c02bf19137382390dd61dbee511","sha256":"14017faa976053a9576fabf9ecef0ac32cf940c0714a1a71c866b535afb03cf0","sha512":"00ae5412e17866f287110169bb9f228d9fe7fdb68632647bed130a4221e212592ad26a633cc4aeace66aa0069e907a87513e7c5a1914892a4f6e8204b3b68f90","ssdeep":"384:lcOj7DcGGC+agVK5oiRUEDJbOwS9XrBQvUTSIAFe1YP+PxO7IWbp/sG:ljcGGC+ahVUEtSweXr6vzI27FVsG","tlshash":"91c2f1dca3ae7667cff01df9618a4c440e3a35bf087843660a4a64c0d8c1be4be85e52","first_seen":"2024-08-19T19:01:03.507113Z","last_seen":"2026-10-07T08:07:43.976193Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":1180,"dns":0,"connect":0,"send":0,"wait":200,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/uploads/180712/1-1PG216240S57.jpg","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.006Z","timestamp":1791360424006,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/180712/1-1PG216240S57.jpg HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 12 Jul 2018 08:24:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b471028-6cf2\"\r\nExpires: Fri, 06 Nov 2026 08:07:05 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27890,"size_decoded":28096,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 420x300, components 3","md5":"5627ba0c2d012a419a73ac45af587f18","sha1":"0927d33281799ebf07d2076b159595ea2464e672","sha256":"2fc07db65ac3cb710fb8a44e4e47909bd32defdd8735ef1b7b18b34660875630","sha512":"0c6022980caff7915ced37f95133dc226ab905903f1470bae0ddfcb59cbf894cecfadaf09996d99a73e5bca89a9a69f5a68acff94826997dbfa3c424095553e2","ssdeep":"768:ltlYKArJvYbS8Wdww8mY+WIBrGD/kUPvRYKqn:hYnZYwdwpLcr8/ksBqn","tlshash":"8dc2d0e58b8c631e8f6f277fb9daf660d912727c39f5911a060d18d86ef50bea410b04","first_seen":"2024-08-19T19:01:03.512478Z","last_seen":"2026-10-07T08:07:43.977711Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1578,"timings":{"blocked":1180,"dns":0,"connect":0,"send":0,"wait":200,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/ajax.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.269Z","timestamp":1791360425269,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/ajax.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 96\r\nLast-Modified: Sat, 10 Aug 2024 09:01:20 GMT\r\nConnection: keep-alive\r\nETag: \"66b72c60-60\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96,"size_decoded":621,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with no line terminators","md5":"ae1625f00bcb78bf9e9c27ebedfe26d7","sha1":"9f0ee94e3bd3b2fb569441621e2dac7dd21d66fd","sha256":"09decd657ef4c873beb6ecc86f403132e47c126f870cbea1903d1ea7128964d4","sha512":"afc08f97d0908069e23ed2e17147bc922a452cdc90a00792d9e80f5294fa4269241ac071712c8ed241e1cc5cfaa0df8fc4f05ce050eb8b529123131e1cdd7fc7","ssdeep":"","tlshash":"48b012161c42fd9040280c9ac135c86460fc9114d110d94613fd041c1794fdc0c06c45","first_seen":"2025-01-23T11:49:05.260358Z","last_seen":"2026-10-07T08:07:43.980374Z","times_seen":2135,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/ts.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.278Z","timestamp":1791360425278,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/ts.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 410\r\nLast-Modified: Wed, 12 Aug 2026 02:04:34 GMT\r\nConnection: keep-alive\r\nETag: \"6a7bd4b2-19a\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410,"size_decoded":937,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"becfab42c511b0c79b9f9b7297480966","sha1":"496cc761774031cc00f0d8115f1ec47ef79a9f46","sha256":"1a8a8edd8f92077e6b68d17f8ed8a66a4e96c2f15a8c69baeaf6cb1552f4b756","sha512":"dc982f939e660872732e977461595076a05cf6b6732344604b4e4c40d1ca9ddea446dd02792fc67e55d949ebddb17751567cc3df35f74a29db791379229f5bea","ssdeep":"","tlshash":"52e02b6e9cb316b47a4114ba452fa418f1ea512f1044d402754cfc014f20ea74b1dae4","first_seen":"2026-05-24T15:51:44.163332Z","last_seen":"2026-10-07T08:07:43.982309Z","times_seen":143,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d367tkzt95ytm.cloudfront.net/","fqdn":"d367tkzt95ytm.cloudfront.net","domain":"d367tkzt95ytm.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:06.558Z","timestamp":1791360426558,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: d367tkzt95ytm.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/ajax.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:07.057Z","timestamp":1791360427057,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/ajax.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/403.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:07 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 96\r\nLast-Modified: Sat, 10 Aug 2024 09:01:20 GMT\r\nConnection: keep-alive\r\nETag: \"66b72c60-60\"\r\nExpires: Wed, 07 Oct 2026 20:07:07 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96,"size_decoded":621,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with no line terminators","md5":"ae1625f00bcb78bf9e9c27ebedfe26d7","sha1":"9f0ee94e3bd3b2fb569441621e2dac7dd21d66fd","sha256":"09decd657ef4c873beb6ecc86f403132e47c126f870cbea1903d1ea7128964d4","sha512":"afc08f97d0908069e23ed2e17147bc922a452cdc90a00792d9e80f5294fa4269241ac071712c8ed241e1cc5cfaa0df8fc4f05ce050eb8b529123131e1cdd7fc7","ssdeep":"","tlshash":"48b012161c42fd9040280c9ac135c86460fc9114d110d94613fd041c1794fdc0c06c45","first_seen":"2025-01-23T11:49:05.260358Z","last_seen":"2026-10-07T08:07:43.980374Z","times_seen":2135,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/uploads/180712/1-1PG216230W15.jpg","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.004Z","timestamp":1791360424004,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/180712/1-1PG216230W15.jpg HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 12 Jul 2018 08:23:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b470fec-6479\"\r\nExpires: Fri, 06 Nov 2026 08:07:05 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25721,"size_decoded":25721,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 420x300, components 3","md5":"21518aed646625a375a27bdd73863553","sha1":"fe88460b0a7ffb73fd3896253f51a65e4eb7187c","sha256":"9a10672f9fc3c8ba0efb4fd5eacb7afd7c07506f3e5cb9875a935559392988dd","sha512":"33b58b0c3881f0057fd1d3f827e1a9ea61e8ba04c6971f7b7d8f5abad20578309c95931c0376506cc53d8b16c2dd6852fe89febef88097c9e3385db65bc43272","ssdeep":"768:lx75Y/rahKfpnmkeY4pPl1sG93QKBlnyH/j1rI9z/1/:dKs6BtePpPliGTB9k/jhIzN/","tlshash":"17c2e1948f812621ee9cb37c6692d22742607f4150bdce27c47fe6d8e79f2f30818421","first_seen":"2024-08-19T19:01:03.508009Z","last_seen":"2026-10-07T08:07:43.992296Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1699,"timings":{"blocked":1180,"dns":0,"connect":0,"send":0,"wait":260,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/404.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:06.570Z","timestamp":1791360426570,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /404.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: AliyunOSS\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: application/xml\r\nContent-Length: 380\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC5FDAA147C0232332FC3DA\r\nx-oss-server-time: 2\r\nx-oss-ec: 0026-00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:07.731Z","timestamp":1791360427731,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/plus/index.php?aid=8","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.961Z","timestamp":1791360423961,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /plus/index.php?aid=8 HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nSet-Cookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":89,"size_decoded":717,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"697c37804807f715cc8a9e7e47aeabe6","sha1":"f92c1abb436942ff4cf1f9e20e776d0da396765e","sha256":"4143d0f2acaf9b971c69b52061b429c8360e770a41d8743f7d11619af7832325","sha512":"a802cd8a02baba0153c25c25b283a4722fd4dc4e32ad6b8efb5c47920fc36b2c5ed35b77b74cb842dd3d39e9a09b479266416049c7fe8ae51a1a346c893c6abf","ssdeep":"","tlshash":"92b012520e5ed22060040440b471c479567c90349701c904408b48940005be80c06f00","first_seen":"2026-07-31T06:30:05.397529Z","last_seen":"2026-10-07T10:23:38.339465Z","times_seen":37,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/animate.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.966Z","timestamp":1791360423966,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/animate.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 30 May 2018 00:29:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df058-df05\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57093,"size_decoded":5258,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"b0a2b4d4c0600fda059c4780e1b89b3c","sha1":"3c8af7713efd968d6fdc8f962d77251c4ea96cdb","sha256":"2bae5625630f3896c1532f1cf62b19ed050cd1a5e3d0dd189f95cf0f31a998ec","sha512":"6b6694e627fc8b3c7b7387dc484fa1dd4448b4e3bc0a554e9f041be85a4f47378093e7b7ab8161011afe2ae6735288d9b77a73ae7bfd6a29a2e64e7c371eb54f","ssdeep":"192:xKQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvq:xKW6yQ","tlshash":"ca43d96929a1104466370a15c7df9e78663ce2a31866ecffb3d2548b8f41fac23cd617","first_seen":"2025-08-23T07:34:40.925826Z","last_seen":"2026-10-07T08:07:43.997618Z","times_seen":6,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":259,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/owl.carousel.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.984Z","timestamp":1791360423984,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/owl.carousel.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:29:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df065-13569\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":79209,"size_decoded":18517,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0e52375e4f1210f8bd211e081dd51808","sha1":"c7dc32dc9532357740cfd54d4a13c88b74703a34","sha256":"55c66291e69b91ae80f27ef5574ae15481c7df9e17aa80870edf646f670b8b7f","sha512":"19d468549884d39c86dce2aab3356c82d20bd1839937a610418b8d919a9ff2fa50237817729718a0ebc387f66ca41f13b97558e9d85c7c0cf209b1531fa734ed","ssdeep":"1536:WELorUUOZZ/Afrx0APP+5FkrhKt1+Ky46c+J0sDZg:WrOZZg0+PcFX+Z3ceZg","tlshash":"e67384c1f36c221b422a31b85e9e63cd723d416ae5115c6fbca9a9d838d146c437efb4","first_seen":"2023-03-08T09:58:17Z","last_seen":"2026-10-07T08:07:43.999549Z","times_seen":34,"resource_available":true,"data":null}},"time_used":996,"timings":{"blocked":735,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/404.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.279Z","timestamp":1791360425279,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /404.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: AliyunOSS\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: application/xml\r\nContent-Length: 380\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC5FDAAFFEFC4343473FA21\r\nx-oss-server-time: 1\r\nx-oss-ec: 0026-00000001\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/font-awesome.min.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.963Z","timestamp":1791360423963,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/font-awesome.min.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 30 May 2018 00:29:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df058-6810\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26640,"size_decoded":6655,"mime_type":"text/css","magic":"ASCII text, with very long lines (26474)","md5":"cd28ec7ca7cf132b280100fe680abfc5","sha1":"1825036ae218f95318fedf712269b4fe2bf65b73","sha256":"7740ab3a18bcafd80c57245a8e6a9b1b8d679517a7e67c8f9e2bd302c0b99e17","sha512":"7d1d3fc94f94d2beba6138d2d5d3ef9e227c949938ea674aa1ffb973bbf28429616863db1fd08bcd6efe300d006586ae305d32eb3b0c9b9c35769f94ac2eda23","ssdeep":"384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:Dlr+Klk3YlKfwYUf8l8yQ/7","tlshash":"6fc240e8e54c01d66731c48bff85b36862b6f73dd5804da9f01f690c29d22a522c5fba","first_seen":"2023-05-12T11:09:33Z","last_seen":"2026-10-07T08:07:44.001012Z","times_seen":50,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":253,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:06.565Z","timestamp":1791360426565,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/tj.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:07.526Z","timestamp":1791360427526,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/tj.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/403.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:07 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 554\r\nLast-Modified: Sat, 26 Apr 2025 08:26:16 GMT\r\nConnection: keep-alive\r\nETag: \"680c98a8-22a\"\r\nExpires: Wed, 07 Oct 2026 20:07:07 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":1081,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (554), with no line terminators","md5":"b97d45d1074ff244e974c82810eb7a2a","sha1":"75ca85653c75678b0bc24ce51ae13100c99bba85","sha256":"01913864088cb746ac003085df922b025d9ca79ac5901440b3726ff3cc1f4670","sha512":"062872df604ce76a2263fa6342763638008d998d19eb77413ebdaa5642128790304bdcd6f520d8f3d428aee6e0dadd9ef5fe880d455f9b286094ec758274a7f9","ssdeep":"","tlshash":"d3f0c05f7c05f2106751393633b7da9ce9af14252009c8875cdac4ac2c28ff80116b0c","first_seen":"2025-09-18T02:31:27.203568Z","last_seen":"2026-10-07T08:07:43.974769Z","times_seen":525,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/bootstrap.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.964Z","timestamp":1791360423964,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/bootstrap.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 30 May 2018 00:29:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df058-2284a\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141386,"size_decoded":21796,"mime_type":"text/css","magic":"ASCII text, with very long lines (540)","md5":"5dbaf10cbc7b79e2a63d931b1d64cec8","sha1":"bed238616d203b1ff6f21f4abe435b297630036e","sha256":"a99818e2f6078af4b0423201fd83226c33e61c66c4df08fbbb6ee10ef07425e5","sha512":"c472230e36db73d155ca2e11eeb267a69436f0f35ff309454471ef15fd79ba7a38e188abf787a8ef5d935d6227a5c46f4931966a841052d0689980e9204d6bfe","ssdeep":"1536:j8vvUIUZjywXxHUoSBJaWT8ghUDPPT61xVG/JP9IZpvNJ23KsO4ex:jqUZO4zUJ+geLu1x8/JP9IZpvNJ236","tlshash":"f6d383d8f6b039407223c09835938e52b71d9143d41fed7ab7e6356cafc82998573b8a","first_seen":"2025-08-23T07:34:40.929559Z","last_seen":"2026-10-07T08:07:44.002043Z","times_seen":6,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":198,"send":0,"wait":203,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/owl-carousel.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.967Z","timestamp":1791360423967,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/owl-carousel.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 12 Jul 2018 07:46:51 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b47076b-1a41\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6721,"size_decoded":2206,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"014e95f11a3214c28d8cfd83cc1a7a50","sha1":"9111999ab3dfff651ad69f8a90d77a4546f59765","sha256":"f7b7589e78ea73e3cf4cb3781af9f11afd3ae8f036277abfac9485d76b5d33da","sha512":"121e7c0f9b868611a3238451ae27da25c1688bdee50a0f4077cabe1c6914e4a27ffa28b815cd9df0a24cf75f19b682ecb44cc5fefcb7f9496c9ed500ddc12aa2","ssdeep":"192:2/IYVDqY5pDcmQM8YXi/AR3U2I7TGpFIJnYW:kIY1qODdjXiIq2YTGpFk","tlshash":"ead121d85215214d60178bb82bfcc3525e3d84a0ff1b459db0ef2a26839ed58782fb5b","first_seen":"2026-10-05T16:54:22.330218Z","last_seen":"2026-10-07T08:07:44.003768Z","times_seen":4,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":255,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/wow.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.982Z","timestamp":1791360423982,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/wow.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 12 Jul 2018 08:03:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b470b5c-3d89\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15753,"size_decoded":4114,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6485e16c8e3d782e1f072150945f672d","sha1":"a15438ecc8480bced2999d659a518062e7a8a4ba","sha256":"f5dc17a738ed9babc28035c67ff7c76e640429568747e570efd65a2f895dc2a4","sha512":"9210b7c425e710b2aa12c6574fb55a160e7b876eff230b26801d9e77f15497cfb7be8acec66a256b0a51d8bfa0dfc3fd33447caeddda6b49bcbba1d160bc3ad6","ssdeep":"192:DF0VXSXMk/JCpC22iNVGBOGqWjJhE4JGe3dSDpKJCpyJYsduDjgXQkKQtr0Q:OxAMgoCPiNgga1KEfdSDpnaYsduRnZQ","tlshash":"5062ef897a5a31208737b37ecf5b8109fb39166b11551148be9c8ae41f7092483eaff8","first_seen":"2024-08-19T19:01:03.492079Z","last_seen":"2026-10-07T08:07:44.004918Z","times_seen":8,"resource_available":true,"data":null}},"time_used":977,"timings":{"blocked":721,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/win.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.267Z","timestamp":1791360425267,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-6.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:15 GMT","end":"Sat, 02 Jan 2027 02:51:06 GMT"},"fingerprint":{"sha1":"71:AA:B2:AB:13:43:B4:24:14:D4:17:18:6C:6D:8C:8A:EF:6C:D2:1C","sha256":"9D:B8:09:0A:5D:43:59:9A:AE:6C:F3:99:ED:13:80:FA:DF:21:7D:65:AE:F9:B0:47:DA:3F:24:41:84:58:15:5A"}}},"request":{"raw":"GET /win.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 6AC5FDAA147C0232339CC2DA\r\nLast-Modified: Sat, 26 Sep 2026 08:50:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 403942505220422286\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: W44eQoYrDa2N1u1W9KG9sA==\r\nx-oss-server-time: 2\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3563,"size_decoded":1528,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3563), with no line terminators","md5":"5b8e1e42862b0dad8dd6ed56f4a1bdb0","sha1":"262deef52406f04a9de3a05a807ca30c412c159a","sha256":"24396949875d6cc5701d903220e11537cf2b70a3afc245eac60f37002d66f923","sha512":"b1e895fa8a7823e991702889232d99f1cc91a2c37d898d4ab4303d3899989822e37a756448b16c84d99833db84c6c120e5edf630e96c401f3bedd0ea38ad6af8","ssdeep":"","tlshash":"30718edc77e6e25b6b8c1da3fe059fea11b6d57b90c17207879cb98d20f420bc668045","first_seen":"2026-10-05T16:54:22.302481Z","last_seen":"2026-10-07T08:07:44.005973Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":49,"connect":208,"send":0,"wait":211,"receive":0,"ssl":627},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imto1ken.oss-ap-southeast-6.aliyuncs.com/tj.js","fqdn":"imto1ken.oss-ap-southeast-6.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"8.212.139.141","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.272Z","timestamp":1791360425272,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-6.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:15 GMT","end":"Sat, 02 Jan 2027 02:51:06 GMT"},"fingerprint":{"sha1":"71:AA:B2:AB:13:43:B4:24:14:D4:17:18:6C:6D:8C:8A:EF:6C:D2:1C","sha256":"9D:B8:09:0A:5D:43:59:9A:AE:6C:F3:99:ED:13:80:FA:DF:21:7D:65:AE:F9:B0:47:DA:3F:24:41:84:58:15:5A"}}},"request":{"raw":"GET /tj.js HTTP/1.1\r\nHost: imto1ken.oss-ap-southeast-6.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 6AC5FDAA7F80DD3431162B15\r\nLast-Modified: Mon, 12 Aug 2024 07:31:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12654278826270211217\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 6NSO1PhJ06U34CJdMjAgjw==\r\nx-oss-server-time: 1\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1110,"size_decoded":972,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (554)","md5":"e8d48ed4f849d3a537e0225d3230208f","sha1":"4f8646de1709593d2b4ab56c6caf7c0fd1177fbc","sha256":"98ebdd779e3e1bbdff110cdb3f1b64499478553b072ae12233727b0e7ab2cbb9","sha512":"a18fc25e80f3e39a682cea479fe81c20f6f8b0ebae9ce2e84d9af08d5186bc1cf9e89e14c52580ba0d962291ae291cbd8ba74d42894f157f6024b44af8c5bf58","ssdeep":"","tlshash":"4211c09e7c05e25467973c7a23b7ddace9ae0032100dd80665ebc0ed6d29ff90126b4c","first_seen":"2024-12-07T07:30:44.931892Z","last_seen":"2026-10-07T08:07:44.010497Z","times_seen":2054,"resource_available":true,"data":null}},"time_used":1095,"timings":{"blocked":-1,"dns":43,"connect":209,"send":0,"wait":211,"receive":0,"ssl":630},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/403.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.280Z","timestamp":1791360425280,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/403.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 12 Aug 2026 02:05:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a7bd4e3-85d\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2141,"size_decoded":1467,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"dc99a3365c66963bf6d8734b6a04e0d3","sha1":"1eaf7926da12fc34618d196f6a9853021ab02536","sha256":"daa8ca529a12933e77240bb1099016e402757302d2430b987d201cca48431f07","sha512":"1be12a21313c20768d56f99f43f8748b089506175be66dd16a4a530720313af28aaab08c2ff6e9ca720e8fd31eb41d9d93b0524fe05163b1b357dc5559f556b2","ssdeep":"","tlshash":"f241ed5df4e374b22837301c6b8fa00a74f1547b688cda007d0d9ac26f824a686b77ec","first_seen":"2026-08-09T06:58:13.67174Z","last_seen":"2026-10-07T08:07:44.011943Z","times_seen":11,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":237,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:06.567Z","timestamp":1791360426567,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/images/logo-dark.png","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.999Z","timestamp":1791360423999,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/images/logo-dark.png HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 30 May 2018 00:29:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df066-a95\"\r\nExpires: Fri, 06 Nov 2026 08:07:05 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2709,"size_decoded":3287,"mime_type":"image/png","magic":"PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced","md5":"5aaf77523fd417d20e5c42c67f7fb88b","sha1":"60aa9b8852e214b1a9408f5c7b1b11a12ce47345","sha256":"037005ffc9f3136b06748d36096ef0b3159692ecc84c5124eace083c9fec8df2","sha512":"1077a0024cf660fa0c49c7352d9e65ce6761904f4498183639c1858af2803e94b6ab25f78036bfc74def5801908bd0aeaf01912bad964cff82f15ff22307bcb6","ssdeep":"","tlshash":"fa5128c9f149aebcb020c071d458b6ac1718d142933692fc430ef4661a9deff5a13368","first_seen":"2024-08-19T19:01:03.506411Z","last_seen":"2026-10-07T08:07:44.015944Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1510,"timings":{"blocked":1252,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/bootstrap.min.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.979Z","timestamp":1791360423979,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/bootstrap.min.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:29:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df066-8c6f\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35951,"size_decoded":10181,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"8c237312864d2e4c4f03544cd4f9b195","sha1":"253711c6d825de55a8360552573be950da180614","sha256":"d5fd173d00d9733900834e0e1083de86b532e048b15c0420ba5c2db0623644b8","sha512":"e18a5959736a9ceef67b40daf7964c519c678d680bbda8d2c7679281f5d349a286c99b96ca24e7a8e64ce987d372d74ae12da7255c606ccfe27ac13a35b5a3d2","ssdeep":"768:b8lBD27UwlNBMl9/qahC2+jS1g8ep0skCXFXflcKGf3Z1RQ:oe78+S1Klvla3ZrQ","tlshash":"f5f29606b23031a107dfb1e5515b020b72396a6ee90690bc78b9dae53db9c48717bf3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-10-07T09:32:09.399963Z","times_seen":11217,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":567,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wordpoints.org/index.html","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T08:07:00.216Z","timestamp":1791360420216,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/apps/CaiJiXia/cjx.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.981Z","timestamp":1791360423981,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/apps/CaiJiXia/cjx.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Sep 2023 06:11:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6503f5a2-9b8\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2488,"size_decoded":2009,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2484), with CRLF line terminators","md5":"7c796c9667d148e3d1d960eae58ca7e3","sha1":"4921f0df8d5ea9f4b6dbd1c6cad4bbc821374e89","sha256":"c5295e9bc5d73b08ca570e9b9aed94742d70ea16833fe3a9f11ae266225ed7a8","sha512":"58452cfeee70da91c0a40dabce71fbe2c5f2e1002d4b21ec08a5c9a9fd11e99cf3f7c301c6600c48228fcbc39d46738ac24a0baf4cda510e0cf1a17f36194d61","ssdeep":"","tlshash":"2b5162adef5238b306e27ae11cbdc72d105404e6787b8271ec989e8439f0ae44d6b353","first_seen":"2023-03-07T15:49:45Z","last_seen":"2026-10-07T10:23:38.381566Z","times_seen":2084,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":582,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:06.564Z","timestamp":1791360426564,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/apps/CaiJiXia/cjx.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:07.316Z","timestamp":1791360427316,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/apps/CaiJiXia/cjx.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/403.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:07 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 15 Sep 2023 06:11:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6503f5a2-9b8\"\r\nExpires: Wed, 07 Oct 2026 20:07:07 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2488,"size_decoded":2009,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2484), with CRLF line terminators","md5":"7c796c9667d148e3d1d960eae58ca7e3","sha1":"4921f0df8d5ea9f4b6dbd1c6cad4bbc821374e89","sha256":"c5295e9bc5d73b08ca570e9b9aed94742d70ea16833fe3a9f11ae266225ed7a8","sha512":"58452cfeee70da91c0a40dabce71fbe2c5f2e1002d4b21ec08a5c9a9fd11e99cf3f7c301c6600c48228fcbc39d46738ac24a0baf4cda510e0cf1a17f36194d61","ssdeep":"","tlshash":"2b5162adef5238b306e27ae11cbdc72d105404e6787b8271ec989e8439f0ae44d6b353","first_seen":"2023-03-07T15:49:45Z","last_seen":"2026-10-07T10:23:38.381566Z","times_seen":2084,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/style.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.972Z","timestamp":1791360423972,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/style.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 12 Jul 2018 07:46:37 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b47075d-b33f\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45887,"size_decoded":9587,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1032), with CRLF line terminators","md5":"f1238469023d88d599b477efa0eafcec","sha1":"bc5eb9a7fa003d8fffaa27cfc76322ec68c8d6fd","sha256":"e7d250d3fa68355319525d8676c7af371330d0924c09c651b5bd0a02fb0d2319","sha512":"4f93a0804b75e6f78581920d08e3e1d9d149403b4b176b1768c14388aa695e1cffadbbc476e7a3a47e1dac0abec8c1b56b82634b160b822d9163ccc57d1e0578","ssdeep":"768:p6cnL10cjBzc/vd8SBEY4JD1ZlhQH+2EXKImy8vlV3Ike7LjWJOVYoRChiXYz0jh:pFa0","tlshash":"ac2366a9fe54304d6307ea99b7f26fb4df2c00e19f0f45bdb46172298386498263e6c5","first_seen":"2026-05-20T07:02:55.454061Z","last_seen":"2026-10-07T08:07:44.020993Z","times_seen":5,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":390,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/images/defaultpic.gif","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:04.001Z","timestamp":1791360424001,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/defaultpic.gif HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:06 GMT\r\nContent-Type: image/gif\r\nLast-Modified: Mon, 16 Dec 2024 11:19:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"67600cb3-ab41\"\r\nExpires: Fri, 06 Nov 2026 08:07:06 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/Plugins/tj.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:05.274Z","timestamp":1791360425274,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Plugins/tj.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 554\r\nLast-Modified: Sat, 26 Apr 2025 08:26:16 GMT\r\nConnection: keep-alive\r\nETag: \"680c98a8-22a\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":554,"size_decoded":1081,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (554), with no line terminators","md5":"b97d45d1074ff244e974c82810eb7a2a","sha1":"75ca85653c75678b0bc24ce51ae13100c99bba85","sha256":"01913864088cb746ac003085df922b025d9ca79ac5901440b3726ff3cc1f4670","sha512":"062872df604ce76a2263fa6342763638008d998d19eb77413ebdaa5642128790304bdcd6f520d8f3d428aee6e0dadd9ef5fe880d455f9b286094ec758274a7f9","ssdeep":"","tlshash":"d3f0c05f7c05f2106751393633b7da9ce9af14252009c8875cdac4ac2c28ff80116b0c","first_seen":"2025-09-18T02:31:27.203568Z","last_seen":"2026-10-07T08:07:43.974769Z","times_seen":525,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:07.259Z","timestamp":1791360427259,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T09:40:59.908662Z","times_seen":18910667,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/lightbox.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.968Z","timestamp":1791360423968,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/lightbox.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 12 Jul 2018 07:46:57 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b470771-fa3\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4003,"size_decoded":1677,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2fd7ba25b87fa5609e6338b02ee62d3a","sha1":"7abd5db2fd5a8ab8964e26ad480c141e0344a5d7","sha256":"181d484e90b13863cb4bc3ee057f5f806f89f9ece03298144669f1abfc848c15","sha512":"e5a5f9ad0f6b9fbfc596a1cf8de99bbed847ab4c103de54506d33c2d3d060503b1e460bfd664d3e78373bd58af5f42ab4750b7787e70df6d99edd428520b4905","ssdeep":"","tlshash":"2881ed2ce79a315ae212f6a8bbf48ba26d4d11d37b2386dfb4d57471d34311828336e4","first_seen":"2025-09-26T21:19:52.715521Z","last_seen":"2026-10-07T08:07:44.022268Z","times_seen":7,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":256,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/tk.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.977Z","timestamp":1791360423977,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/tk.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 12 Jul 2018 09:20:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b471d4f-6fc3\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28611,"size_decoded":6585,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (379), with CRLF, LF line terminators","md5":"92c39c4fe76cff29af66e9fe0d86992a","sha1":"e46bb38b514ae38eda73a417206b14079b7d2212","sha256":"c61581f16dc3f208f184dcfc53d3819a4ab2a698f9e04a671ae29ef3016f952c","sha512":"92c5bdd93f3df488de61b7c7ece04a13ca3f87cde23266a67efff8b48bf6b74e1f960fcacf2336af314c06fa89f13b175eff785ee9cc9efdeb8bb75625b0f044","ssdeep":"768:Sh+Pz/WxYuhgPgVw6ywqD6jM4/WuRF1oWuhJsJJF7YOW0RHjHO62htJ3u6J8Hb1f:Sh+SPxwFwku/uGWZYD","tlshash":"c9d220acea6525cea313abbabbf5a7111f0c50f5cf0f42bdf4607129e28a55825321c5","first_seen":"2026-10-05T16:54:22.2878Z","last_seen":"2026-10-07T08:07:44.023503Z","times_seen":4,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":481,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/owl-scripts.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.985Z","timestamp":1791360423985,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/owl-scripts.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 492\r\nLast-Modified: Wed, 30 May 2018 00:29:45 GMT\r\nConnection: keep-alive\r\nETag: \"5b0df079-1ec\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492,"size_decoded":1019,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"864432490b282d0b46df82848d3c79af","sha1":"11109b4ce37a8294948873a6cec370dda767674e","sha256":"994ae1aa35e1e7f90a969a87d7399a428e31ee84988f2ff0545ca3412d9d29fa","sha512":"bf54a38e06f9b2da9254eefc492106a758a2605f9cd4cb7fcbad518c3a44af5da9742fe904aacfce7d6976a9dc60ba2d37a302942c24aa3c489e2db86a93858b","ssdeep":"","tlshash":"86f0cd1d5cb91304513331b46ebfe5051915622fec04bc013d4c26d15f2d11e76f3784","first_seen":"2024-08-19T19:01:03.496228Z","last_seen":"2026-10-07T08:07:44.026551Z","times_seen":8,"resource_available":true,"data":null}},"time_used":997,"timings":{"blocked":738,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/jquery.mmenu.all.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.991Z","timestamp":1791360423991,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/jquery.mmenu.all.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 30 May 2018 00:29:13 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df059-ac45\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44101,"size_decoded":6660,"mime_type":"text/css","magic":"ASCII text, with very long lines (484)","md5":"53885888701273513a7d8ca0b16fe7dc","sha1":"686c259f78fc2dac0a3df59c8a00fe74d7800c46","sha256":"95fb161a1d0cde405c7bc6e5c24dbb14188d9d9715cd98bb37ba393bc5727f9b","sha512":"d988f5160ef34b23c552f64bd2de3e684f9c19dd0f5b709b775bd666d78db48a52828845f85ede3ae2f49fbfe51af6b69564526282523d2afa2b4a99910d9b98","ssdeep":"768:TMugh1OxjUwEG9VswTfS6Gc/HWxU/UEBd1VWCos1n/TifUeY7YRpyxleB4YjMfsS:TMugh1OxjUwEG9VswTfS6Gc/HyEBd1Vj","tlshash":"3713ac266da211cd201aa77fd6c90fbc5b3dd1016b520dfbe70a504bcf8ae5b74e4a42","first_seen":"2023-05-23T13:25:41Z","last_seen":"2026-10-07T08:07:44.027242Z","times_seen":214,"resource_available":true,"data":null}},"time_used":1181,"timings":{"blocked":981,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/404/error404.png","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://wordpoints.org/403.html","date":"2026-10-07T08:07:07.739Z","timestamp":1791360427739,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /404/error404.png HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/403.html\r\nCookie: PHPSESSID=jm4lrrindrm64ho6f5ok4ol7v3\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jm4lrrindrm64ho6f5ok4ol7v3"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:07 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a7d0560-791\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1937,"size_decoded":1329,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"baee0d263684f83f0043edc317f46b8b","sha1":"075ea54274be1075746dd380f7a5cd8db05e68ee","sha256":"b9fb920b76c24a639a2088f4de1a797b6d3738a89037cf8c77a942f9bc517a5d","sha512":"8079c4ce92dbc49e093303865cd6d647455e5a1b3e779192bd04b2e2d9b7a0bcd318431e50276815de7f799d5047321bd708ae231da2ff882dd2a138c2978f2a","ssdeep":"","tlshash":"3941942683901313b07ad94279b2dbd57a2141cbb6420abcb97129f3dacd07253223dd","first_seen":"2026-08-15T11:14:16.129897Z","last_seen":"2026-10-07T08:07:43.933552Z","times_seen":29,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/css/icomoon.css","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.970Z","timestamp":1791360423970,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/css/icomoon.css HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:04 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 30 May 2018 00:29:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df058-1ffb4\"\r\nExpires: Wed, 07 Oct 2026 20:07:04 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130996,"size_decoded":20752,"mime_type":"text/css","magic":"ASCII text","md5":"1089886cb37eb03c1c00ae4e77c96cd9","sha1":"3621a09af59f051229ff7e194a5b5b3e58bc1a5c","sha256":"f3744d09ce657603b0eafb8bb8b47c1a3f549738d4f1ea1ad3b17b683440e240","sha512":"76f7460e5d5b29057cbe7f29c080f6332d0be6794ba70fc6a444e73a403ab1e6efa46fe272c547042eb049d01eed2772cf82079b93a5d7d39c1605d872b76315","ssdeep":"768:jvEDMCYJ3uI4OkPKcxJQVDkZuleu2PQZN76gWl/pV3LWWYyvxfhgDzM67U:wG9DSpsEPxTzayzj6w","tlshash":"73d3a2e9f9bd51905701d48132426610e715e3299d8f8cabf2e37caedbe221359a33dc","first_seen":"2025-08-23T07:34:40.9483Z","last_seen":"2026-10-07T08:07:44.028417Z","times_seen":7,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":261,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"wordpoints.org/skin/js/jquery.mmenu.all.min.js","fqdn":"wordpoints.org","domain":"wordpoints.org","tld":"org"},"ip":{"addr":"154.219.182.151","port":80,"asn":134548,"as":"DXTL Tseung Kwan O Service","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://wordpoints.org/index.html","date":"2026-10-07T08:07:03.992Z","timestamp":1791360423992,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/js/jquery.mmenu.all.min.js HTTP/1.1\r\nHost: wordpoints.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://wordpoints.org/index.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 07 Oct 2026 08:07:05 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 30 May 2018 00:29:43 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"5b0df077-ba29\"\r\nExpires: Wed, 07 Oct 2026 20:07:05 GMT\r\nCache-Control: max-age=43200\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47657,"size_decoded":12919,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10159)","md5":"fd1a44bb3ed1933b01935c775f0a5612","sha1":"3621f8040b6ace21e0837085f7ac27b2bf5afde8","sha256":"29090a2759245cdf8b76b6077ec8832f9f1f09968f828f6599082510dd578588","sha512":"1a891a9b935a74a1b7da0626e0f8ecb768bda2c29fb196f3d9bc9513bd7d8138ffc458c6ad2dc4cafe94309f0e63c7ab7c2f34225a634274fd0d57410df37807","ssdeep":"768:Tl2zhUXA4mBVz07aSVhGI6nXuhch5lVJ5g+hL+UQBbceT4aZ:eUXaYtvGICYMfVHh+Ule","tlshash":"1d23f85d708431e585bbe1e661ef900aa433083d5106c84c727dead94e7ea1929e3ffe","first_seen":"2023-03-07T15:07:55Z","last_seen":"2026-10-07T08:07:44.032563Z","times_seen":201,"resource_available":true,"data":null}},"time_used":1241,"timings":{"blocked":984,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"wordpoints.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"wordpoints.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}