{"report_id":"1f9c1dcd-91a1-4aa9-ac87-2c7834d177b1","version":0,"status":"done","tags":[],"date":"2026-07-17T08:24:46Z","url":{"schema":"http","addr":"3652365e.cc","fqdn":"3652365e.cc","domain":"3652365e.cc","tld":"cc"},"ip":{"addr":"34.85.99.0","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"14.128.54.125:8889/","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"title":"14.128.54.125:8889/","dom":{"size":8980,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6bd5dd20051073825516dfd3128a0546","sha1":"6fa0bdc34f3037063319bc39b377588492bc7e05","sha256":"355a19a7e8fe7f7daeab948d6c457ca4eeca280350c1f0ae8483735cfbfce852","sha512":"245c18a1ff36f0f6ef08efa527d65efb7eb5d2743b40bbb08de29109d97088a618149177e2495df59ac62e4f4a83ee65c12a35a0157e965b1aa04c6ed592cf21","ssdeep":"192:GyLloqw271PyYIrq2dYMOp+8KOzkz79p+h+2tbXsY1z3OgGphWBpboXM2oxQ1enz:GqQFh0NR8Mc4fh","tlshash":"3602a80565f3255aa4135064afe32b196220d003d90acc6dbfcd938cdfdb59ac9e3b99","dom_hash":"domhash4d6e42caff118b0f87b4a6b7b0560aca","first_seen":"2026-07-01T12:24:56.040168Z","last_seen":"2026-07-17T08:24:50.557671Z","times_seen":16,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"3652365e.cc","fqdn":"3652365e.cc","domain":"3652365e.cc","tld":"cc"},"ip":{"addr":"34.85.99.0","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T08:24:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"3652365e.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"3652365e.cc","ip":{"addr":"34.85.99.0","port":80,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"domain_registered":"2024-06-03","domain_rank":0,"first_seen":"2025-02-11T04:29:19.651383Z","last_seen":"2026-07-17T02:26:11.856162Z","alert_count":12,"request_count":3,"received_data":2308,"sent_data":1286,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"14.128.54.125","ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":66548,"sent_data":2598,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"34.85.99.0","ip":{"addr":"34.85.99.0","port":31887,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":514,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"3652365e.cc/","fqdn":"3652365e.cc","domain":"3652365e.cc","tld":"cc"},"ip":{"addr":"34.85.99.0","port":80,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffc1fb024b21366b59d5e63e7a0e42b5","sha1":"72b1d3af7d9df602e2c475b8e2072ce077c6d677","sha256":"163a61d631d1ca28a30a7fe561557dd8bf22d553814b4e7e5981d3e4fe2a889b","sha512":"da8ff71e22984937b1bdb02e8c96108f04005f1b723cffcfb997e458dad49d9bfc54f95da4c3dc8ff01e8f5aa3dc9d271b93b143193341b8149deec88e0fde4f","ssdeep":"","tlshash":"3d01f1cc714a38b647621035b2bfa216b17d5ba009dd5120909a68917a75d678307f5e","size":792,"data":"","first_seen":"2026-07-06T14:01:46.699128Z","last_seen":"2026-08-03T23:33:40.119848Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"34.85.99.0:31887/z/eyJ1IjoiL2NjLmU1NjMyNTYzLy86cHR0aCIsInRzIjoxNzg0Mjc2NjYwMDI0fQ.js","fqdn":"34.85.99.0","domain":"34.85.99.0","tld":""},"ip":{"addr":"34.85.99.0","port":31887,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c57278f41d5f36a3bc7f9c08ffeca9a","sha1":"6a6df5553b23f27f13ef1f866a98ada94ccd90d1","sha256":"dab7deb0ae956f6184c5d9f555dafa817357fa7c270ead0330d508eb83dd1acd","sha512":"9774cc22d8ec80a2a92b975455b1935fde33d7eb2a74903f85a5dc7528582db6b07683731e1953afeffba59a88019e1943b2857d0a76f11731fc9a2c2c944473","ssdeep":"","tlshash":"4ed0a7f150957a75862c554e37bfb792bdd1214b76b1204500dd4d14a45cd4204a9da4","size":242,"data":"","first_seen":"2026-07-06T14:01:46.700403Z","last_seen":"2026-07-17T08:24:50.564379Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"14.128.54.125:8889/","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"024da3134343ad04f04eb5f31466a50a","sha1":"ec0606ee5434c9aee241867f8d2f2e3b30a3656a","sha256":"82230c0adeb59955d052448ad588b404763f7b20fe9c054da5e63e91989b0740","sha512":"ad5d43e62b7bc44be0fd7163e3cfd912570220230434fd0e4429193131f3b85918c9f31a7f8a653bf4dadfab36dc322baeacac6c8e28e6b9b6e43f827fac636b","ssdeep":"","tlshash":"aab0220c22aa0803003b38008a82200822b300ab883c0a0232082bcc0eea3aa022ee08","size":115,"data":"","first_seen":"2026-06-14T23:40:36.13109Z","last_seen":"2026-08-03T23:33:40.117907Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"14.128.54.125:8889/","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"73045a3d189155991551b00b8c232df0","sha1":"5cfc60979962aa3af31c98a60ee723e80039707f","sha256":"d06ef91c88edeb3a17913a3d236ff6204af70ba986c591280bb71a42db103a22","sha512":"5af9da706c86a15cb5773435ae4346345708dda706ca3fa9f1f545425a213eadc5806649311e7c836f41b79c267f0a8321c5d22b6371d782487f416195e0c02f","ssdeep":"","tlshash":"9841df0e52f31e7d505a33660fd73208961162132e06ec0dfd4cc3048fbb9a78aa6e99","size":1916,"data":"","first_seen":"2026-06-14T23:40:36.132053Z","last_seen":"2026-07-17T08:24:50.565346Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"3652365e.cc/favicon.ico","fqdn":"3652365e.cc","domain":"3652365e.cc","tld":"cc"},"ip":{"addr":"34.85.99.0","port":80,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://3652365e.cc/","date":"2026-07-17T08:24:20.151Z","timestamp":1784276660151,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 3652365e.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://3652365e.cc/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 1009\r\nCache-Control: max-age=5\r\nConnection: close\r\nServer: openresty\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1009,"size_decoded":1154,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (983), with no line terminators","md5":"f3403e2ecd7f96382780b167f72bff59","sha1":"a873d283fc8732cf1e7e588b594e574759a1331b","sha256":"21308bee5ea679e701eec6622d8932e42e34ad774974be668aee8b9b59b2cc9d","sha512":"ca6f17676340d2e35e04e02ccc65952c17cde881b9db7e35164a8fefdae4d4e55402c2ef9840dce97201e64b508c9822bf5f9ab136da5de942f903ca770227d4","ssdeep":"","tlshash":"781165cc390b39a54732107576ffa32f713957500ed9911090daa8527e35d57c703f09","first_seen":"2026-07-17T08:24:50.558327Z","last_seen":"2026-07-17T08:24:50.558327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"3652365e.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"14.128.54.125:8889/","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:24:21.068Z","timestamp":1784276661068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"14.128.54.125","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Thu, 18 Jun 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:71:1C:0D:49:91:D2:0D:DE:A2:0D:4C:70:8D:A0:B9:04:71:49:1D","sha256":"39:6A:FA:22:AA:F4:1C:45:24:E8:C8:47:E6:27:EF:30:5C:BF:9D:97:4D:CA:DF:1C:8A:B0:49:FF:5D:9D:07:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 14.128.54.125:8889\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://3652365e.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 17 Jul 2026 08:24:22 GMT\r\nContent-Type: text/html; charset=utf-8\r\nLast-Modified: Tue, 16 Jun 2026 12:06:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a313c3f-222b\"\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8747,"size_decoded":3348,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"64d9c5d9df573e7b9def0c933c3d41d9","sha1":"367bbc359a7866e1d1bfb8d19f55754f6827febe","sha256":"8962cfc2163abf824f3c612a345cc9c55f7136981fd21ce047fa89ca5bcb650b","sha512":"33868caa48f2893a86b2990ca85e1a51bc6d7744a11515718da96f199620ec65d63d6b1433623205805a28e3be7c744a1261dce24592d3a646dffd57c75b7c45","ssdeep":"192:SyLloqw271PyYIrq2dYMOp+8KOzkz79p+h+2tbXsY1z3OgGphWBpbh4CxQ1en8MN:SqQFh0e88Mc4fF","tlshash":"5f02b90566f32556a4135054afe32b1a6260d003d90bcc6dbfcd938ccfdb599c9e3b99","first_seen":"2026-07-01T12:24:56.047323Z","last_seen":"2026-07-17T08:24:50.559388Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1122,"timings":{"blocked":0,"dns":0,"connect":285,"send":0,"wait":282,"receive":0,"ssl":555},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"14.128.54.125:8889/wdly-dh_06.jpg","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://14.128.54.125:8889/","date":"2026-07-17T08:24:22.278Z","timestamp":1784276662278,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"14.128.54.125","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Thu, 18 Jun 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:71:1C:0D:49:91:D2:0D:DE:A2:0D:4C:70:8D:A0:B9:04:71:49:1D","sha256":"39:6A:FA:22:AA:F4:1C:45:24:E8:C8:47:E6:27:EF:30:5C:BF:9D:97:4D:CA:DF:1C:8A:B0:49:FF:5D:9D:07:34"}}},"request":{"raw":"GET /wdly-dh_06.jpg HTTP/1.1\r\nHost: 14.128.54.125:8889\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://14.128.54.125:8889/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 17 Jul 2026 08:24:22 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 14 Jun 2026 22:41:11 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a2f2e07-5475\"\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21621,"size_decoded":13871,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2015:05:07 23:27:55], baseline, precision 8, 174x44, components 3","md5":"19e5729e4e086463be09bc8727b55a14","sha1":"a46bf560c19a8827ddcc2c13d1d7945f184a0b64","sha256":"bbf1932d304be451f87e26d65134763c542121a02985ec0df4f9d58783eeab4b","sha512":"06c8abc3a58720198a60b77b7eddf39799757410cdb0260c4b745587bcd31b333e2ed84fb2b1bd4be807e6cff6f35a15be133ed28d622705f804aa08c2d21766","ssdeep":"384:sSpSuw2nZnl8sw3ivbATDY96nIbkA7K3/LVViiizM:NwKlXQuQfjZuzM","tlshash":"99a27c097793af11eec4917a55a2cb478659af7b38e31b0b389c71427f34b816c6de02","first_seen":"2023-09-04T01:29:10Z","last_seen":"2026-08-03T23:33:40.112802Z","times_seen":41,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"14.128.54.125:8889/favicon.ico","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://14.128.54.125:8889/","date":"2026-07-17T08:24:22.824Z","timestamp":1784276662824,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"14.128.54.125","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Thu, 18 Jun 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:71:1C:0D:49:91:D2:0D:DE:A2:0D:4C:70:8D:A0:B9:04:71:49:1D","sha256":"39:6A:FA:22:AA:F4:1C:45:24:E8:C8:47:E6:27:EF:30:5C:BF:9D:97:4D:CA:DF:1C:8A:B0:49:FF:5D:9D:07:34"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 14.128.54.125:8889\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://14.128.54.125:8889/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Fri, 17 Jul 2026 08:24:22 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 146\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":420,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T12:57:42.278187Z","times_seen":548986,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3652365e.cc/","fqdn":"3652365e.cc","domain":"3652365e.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:24:16.455Z","timestamp":1784276656455,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 3652365e.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"3652365e.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"34.85.99.0:31887/z/eyJ1IjoiL2NjLmU1NjMyNTYzLy86cHR0aCIsInRzIjoxNzg0Mjc2NjYwMDI0fQ.js","fqdn":"34.85.99.0","domain":"34.85.99.0","tld":""},"ip":{"addr":"34.85.99.0","port":31887,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://3652365e.cc/","date":"2026-07-17T08:24:20.046Z","timestamp":1784276660046,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /z/eyJ1IjoiL2NjLmU1NjMyNTYzLy86cHR0aCIsInRzIjoxNzg0Mjc2NjYwMDI0fQ.js HTTP/1.1\r\nHost: 34.85.99.0:31887\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://3652365e.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 17 Jul 2026 08:24:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-store\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: no-referrer-when-downgrade\r\nContent-Security-Policy: default-src 'self' http: https: data: blob: 'unsafe-inline'; frame-ancestors 'self';\r\nPermissions-Policy: interest-cohort=()\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T12:57:20.675744Z","times_seen":17836775,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"14.128.54.125:8889/3652lg.png","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://14.128.54.125:8889/","date":"2026-07-17T08:24:22.277Z","timestamp":1784276662277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"14.128.54.125","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Thu, 18 Jun 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:71:1C:0D:49:91:D2:0D:DE:A2:0D:4C:70:8D:A0:B9:04:71:49:1D","sha256":"39:6A:FA:22:AA:F4:1C:45:24:E8:C8:47:E6:27:EF:30:5C:BF:9D:97:4D:CA:DF:1C:8A:B0:49:FF:5D:9D:07:34"}}},"request":{"raw":"GET /3652lg.png HTTP/1.1\r\nHost: 14.128.54.125:8889\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://14.128.54.125:8889/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 17 Jul 2026 08:24:22 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 13 Jun 2026 23:52:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a2ded56-2ed7\"\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11991,"size_decoded":12077,"mime_type":"image/png","magic":"PNG image data, 550 x 68, 8-bit/color RGBA, non-interlaced","md5":"9d8ba84ea2a36c51492d5faf87f3df5c","sha1":"71566cf5865a36a074b9c7d91cd2bcf5d3a18d8b","sha256":"ddfeb2547dc557b0eedf65381905de086e9c0ab76207a86b0090aa41ea7ec477","sha512":"8bc12bac96519275654bac5bc03848b9cc29167a7bc800047e20061f720429d8c0291eb5fc2ea7df672caf7b84b20048a5594f45a44c31a86057f1194e708afa","ssdeep":"192:bbX5OYJcAvr+mOSI6quZ9Q8mY31eCQfCuHKKnvGELYHLmdDAhLvnvms+VxRxD2cr:bgwcAT+0I6zk8mY31eCAPKKvZOyFAhL4","tlshash":"a532c049f7663242ec12ce2763e546e7552b106ad9d5e1403a9fc8e4fca10fced890e2","first_seen":"2026-06-14T23:40:36.117449Z","last_seen":"2026-08-03T23:33:40.11008Z","times_seen":18,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"14.128.54.125:8889/%E7%BD%91%E5%9D%80-2new.png","fqdn":"14.128.54.125","domain":"14.128.54.125","tld":""},"ip":{"addr":"14.128.54.125","port":8889,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://14.128.54.125:8889/","date":"2026-07-17T08:24:22.283Z","timestamp":1784276662283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"14.128.54.125","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Thu, 18 Jun 2026 00:00:00 GMT","end":"Wed, 16 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:71:1C:0D:49:91:D2:0D:DE:A2:0D:4C:70:8D:A0:B9:04:71:49:1D","sha256":"39:6A:FA:22:AA:F4:1C:45:24:E8:C8:47:E6:27:EF:30:5C:BF:9D:97:4D:CA:DF:1C:8A:B0:49:FF:5D:9D:07:34"}}},"request":{"raw":"GET /%E7%BD%91%E5%9D%80-2new.png HTTP/1.1\r\nHost: 14.128.54.125:8889\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://14.128.54.125:8889/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 17 Jul 2026 08:24:22 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 14 Jun 2026 00:54:52 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a2dfbdc-56e5\"\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22245,"size_decoded":21709,"mime_type":"image/png","magic":"PNG image data, 504 x 135, 8-bit/color RGBA, non-interlaced","md5":"5f05bde024db7e1186571e3020d7c8fe","sha1":"6b665db5872891a5d8f894991deb52f9ab8efa7d","sha256":"71ea269ed631b184ed4fe22c50e138c2a624b5a68a3b2b10e99c67454f305f97","sha512":"fcfb31aa7951dfbf1d5161fc1d99b45080ff453fd0dded32a01ace3174c94970ea61ac9a3268c026a42a144dc9189d6a57ed1408d1c0aaeaf20eac91f2852e4c","ssdeep":"384:VnnPskB1gU8c8knT3FOzqNw/eYVpzZdiOybmEgjM4A22rmy6niRZfk5ovX8/qZkw:lJxYGw2YVp9diTqEF4A2ZVnioikSSW","tlshash":"69a2bff1ee08984285e871c49b846543102e63c15ec7b1e6eb8c8f5aed7cfac8c4a743","first_seen":"2026-06-14T23:40:36.128623Z","last_seen":"2026-08-03T23:33:40.113336Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":0,"connect":276,"send":0,"wait":551,"receive":9,"ssl":306},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"3652365e.cc/","fqdn":"3652365e.cc","domain":"3652365e.cc","tld":"cc"},"ip":{"addr":"34.85.99.0","port":80,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:24:19.416Z","timestamp":1784276659416,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 3652365e.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 1009\r\nCache-Control: max-age=5\r\nConnection: close\r\nServer: openresty\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1009,"size_decoded":1154,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (983), with no line terminators","md5":"412915502f5352616ab580cd56a978a3","sha1":"41fb461a0693269ccb479f22ee3ee483451d19af","sha256":"1bbf9eb4ec14da2e157d285ebc72c1181a178c9a68580d19a5c2060717591d9e","sha512":"f5cf7353dd3fd6241bd7a5b7b98acfdae770ad6a42e0871182f6dc1c8ea47f6e4f11bc303781a539985e5406a6eb95dc856a2f1d42abb4dbc2ecba92017c7df5","ssdeep":"","tlshash":"db1132cc390a69a5473210b476fba32eb13957a00ed9911090daa8516a35d5a8b03f09","first_seen":"2026-07-17T08:24:50.562526Z","last_seen":"2026-07-17T08:24:50.562526Z","times_seen":1,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":3,"connect":262,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"3652365e.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"3652365e.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}