{"report_id":"24e06e20-0996-42b7-a7a3-734ad7de9f1f","version":6,"status":"done","tags":[],"date":"2025-11-27T08:07:13Z","url":{"schema":"http","addr":"hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"title":"ディオールの2024年春のバッグが、パリファッションウィークのショーのバックステージで輝いています","dom":{"size":80969,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"0b5b5c172e0aa98d6e69032014139ed5","sha1":"3dc56986ba182b7c3fa1e489bab0d9168790364a","sha256":"a3e9d8556ceacd773df78b4fed24fc4afe0463bccff16fe7ad6b34bfe148ef6d","sha512":"7a05fb2ff47101418a1392479137e1eb753ae3a89b8bfaee297d6ff5000fadb281c3c7c514aa4c7d43d82a21243b17cdadf1a251681736bf5683c0029a71cf1b","ssdeep":"768:cZdapzLgx6pNKa7CniyFLroDF8x9XWGYpdd0zwtByydZhnObVE/clCnoM2Q00F:sap3C6pNbylroZ+/9y2oj00F","tlshash":"cc83957d73d7203a5e27a2e49449362861cb4daed9f12b1278fcd4186b90fdea50307e","dom_hash":"domhashf8122657984291b2555bb9dd19d626fe","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-01T08:07:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"hoshiwatch.top","ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2025-11-19T02:08:26.032534Z","last_seen":"2025-11-27T07:25:57.229921Z","alert_count":11,"request_count":11,"received_data":732048,"sent_data":7839,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.fashion-press.net","ip":{"addr":"153.126.241.87","port":443,"asn":7684,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"domain_registered":"2006-03-23","domain_rank":33909,"first_seen":"2014-06-19T08:31:42Z","last_seen":"2025-11-21T04:21:48.014427Z","alert_count":0,"request_count":2,"received_data":284,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"oggi.jp","ip":{"addr":"182.236.92.146","port":443,"asn":15830,"as":"Equinix (EMEA) Acquisition Enterprises B.V.","country":"Japan","country_code":"JP"},"domain_registered":"2001-03-26","domain_rank":89637,"first_seen":"2017-09-07T19:41:17Z","last_seen":"2025-11-23T03:23:09.136484Z","alert_count":0,"request_count":1,"received_data":16401,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-images.buyma.com","ip":{"addr":"151.101.66.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2004-01-19","domain_rank":293865,"first_seen":"2022-03-11T11:33:01Z","last_seen":"2025-11-21T00:42:01.675585Z","alert_count":0,"request_count":1,"received_data":35036,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2025-11-24T02:10:19.199879Z","alert_count":0,"request_count":1,"received_data":358,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.cdnthumb.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-12","domain_rank":0,"first_seen":"2024-12-29T18:00:44.186245Z","last_seen":"2025-11-25T00:43:23.607901Z","alert_count":0,"request_count":10,"received_data":1554376,"sent_data":4810,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"216.58.207.246","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-11-23T23:06:06.069734Z","alert_count":0,"request_count":1,"received_data":126344,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.jackroad.co.jp","ip":{"addr":"3.167.2.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-08-12","domain_rank":128899,"first_seen":"2014-10-25T11:36:40Z","last_seen":"2025-11-21T04:47:32.156211Z","alert_count":0,"request_count":1,"received_data":237201,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"54add3968f32fde494dd79e312f63418","sha1":"509255fc68d07afb3e61144fd7de8839d865a700","sha256":"5fccfc53a2301ac575e6e08a64c58113cb04066b19a5980b3a3fa01984e89ee0","sha512":"bc3dc4e2b7938703d46d1b66968ac809f8abb3865baa7b69d26e3558338cd2eff0ef5350e975d961ecaa90d9dfe73cfdaa19ec56bb1c8207239fdb003037233a","ssdeep":"","tlshash":"20d08c2bb486a0fae0376928b23b5220309a3c1bb004a001365d80b14f034003032235","size":219,"data":"","first_seen":"2025-11-04T12:19:06.397904Z","last_seen":"2025-12-03T02:43:18.476642Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"442c7bf255707a0ad21141e0fc1f2797","sha1":"59da82a255d67448e1648c1e78d3a36523b1121e","sha256":"724d790e94570eb0edb403ad80a5203dd5e589cf896dd9029b200869116eb211","sha512":"472569710643229a5626928b6230f5fd49f52e38439bed1d2d072236c0d4b42d8d0879956f12d9b3b8f51dda54e07161e784ae8cf7a3d7ec3a1708b9dca6079d","ssdeep":"","tlshash":"ef41e07df4ea36f5073731b0da7f370638b920a7b645e40838ad41841fa5862397c5ab","size":2179,"data":"","first_seen":"2025-11-13T01:15:04.282049Z","last_seen":"2025-12-01T23:30:43.852873Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js?id=KKcdvi8eGnNALXJb\u0026ck=KKcdvi8eGnNALXJb","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-04-27T14:26:20.594405Z","times_seen":87395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/lazy.min.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96201abb62283557a9d7b97b4cab14ab","sha1":"a72f33d920d0ab863df4cb60edf44ec140304cdb","sha256":"46112dbceed738f759d03f04b115d5256a7d73660b7795acb382192ad84d9f98","sha512":"26b2f5c174744de4e87ab925e933c351af75df64b73c1d5478da594479827ba4f14b8dcf14951c1185218c96ff8badeb49dfae46fa7395c18eb6f0bfac341c0e","ssdeep":"192:dIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:d2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"16f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","size":7889,"data":"","first_seen":"2023-03-07T01:24:12Z","last_seen":"2026-04-27T13:12:51.174827Z","times_seen":5163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/jquery.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49edccea2e7ba985cadc9ba0531cbed1","sha1":"f8747f8ee704d9af31d0950015e01d3f9635b070","sha256":"1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df","sha512":"f766df685b673657bdf57551354c149be2024385102854d2ca351e976684bb88361eae848f11f714e6e5973c061440831ea6f5be995b89fd5bd2d4559a0dc4a6","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVyp3:fsAg0psxTva/FSeKy2bDD5a98Hrq","tlshash":"f893e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","size":96873,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-04-27T16:20:25.849445Z","times_seen":19870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/fonts/icomoon.ttf?cyzug3","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/fonts/icomoon.ttf?cyzug3 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/wp-content/themes/swell/assets/css/icon.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 15 Oct 2025 01:04:52 GMT\r\ncontent-length: 105372\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68eef334-19b9c\"\r\naccept-ranges: bytes\r\nage: 2476\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MsgOtzdyGSSeVi13Yc8%2BDqg4lXSiHDHz0ue6kbfA35NPihVWa0v6qow%2BqvlwG8woD1yHqmTbGjWvA%2BDi7Wac6pr7NawYnqBZZFo9g%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a5020ed985a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105372,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"2b8d53acf62f8fa4191c09369a6e665d","sha1":"4cbb780d80663a55132dfa2079334c3125dc0bf7","sha256":"77c0b6ba36b62072af6e27681d431fbd6a6f5fcfe4e8fd79371964bc13f96d68","sha512":"6114288c7c6329b37a32e40238601fb338a3328f5a4e313d71151ab0312b158902218dbc09b3e9c381d70c6f737055601289273b076ce44d92020a80be428c82","ssdeep":"3072:OdlHH/Zt+I0t5Y1eDhLkgHlbHjHlByGFJB4yIHqoRAiCQ2FoDd8VbA5iZzB9PQk8:elHH/Zt+Pt5Y1eDhLkgBHjHlByGFJB42","tlshash":"2ba33c4bdb5ecbbffc22c7780dab40241deaca25933ed29e99441d86f4148f84c29795","first_seen":"2023-04-27T14:56:28Z","last_seen":"2026-04-26T16:42:38.892125Z","times_seen":506,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202410/31/120630tunfb3jfnpbbmdd3.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202410/31/120630tunfb3jfnpbbmdd3.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 225749\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 31 Oct 2024 04:06:30 GMT\r\netag: \"371d5-625bdf1709d80\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuPMJbS%2BGMmmVJn760v2qFEfCO0IWjzrDicopy3C5SKyxyGE61C3f3tKqiFl776%2BzZm9cmc%2Fbwh1Qg3wYf5Z1bIsTxIBio3wwAMqAdxD394%3D\"}]}\r\ncf-ray: 9a5020ea6868b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225749,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 1080x1440, components 3","md5":"1a83f4aaeb61b9df1358b6ac94e07d2c","sha1":"d777e0b1e270807b7a999055a4773629efc4eca5","sha256":"795b4736ea32e3e5bc42c1e1a7d4ef8eaefd7cb4a230932db66854aa72aed30b","sha512":"d91f173584c3e24b8c9a287de881d627fa54ea5422ad533b0c1cb838680531d8a0519b71f3878f3bdef96af04ef275f96ed48facce806719106a4730b23ca5c1","ssdeep":"3072:soH8GtoRaujlOw2gS7fRxpEfSyXFsUHAEQ1TPZqPWN74nlw8kfdA9Up85A3Rbcna:sW8GtMlz2gS94qIlk1TPkafl85A3VTf","tlshash":"6424122f390582b2b1b659d9e856be3ff351de9218951c4a0648b385bd780f0cb21ee7","first_seen":"2025-11-23T03:45:15.269895Z","last_seen":"2025-11-27T13:50:05.296808Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":56,"dns":3,"connect":1,"send":0,"wait":470,"receive":924,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-27T08:06:49.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 27 Nov 2025 08:06:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9GY5wCBOjxhjXeFyKrLHUKHGfQXtynFQ2GMKdClBx8AvwY7h1W1K4AOedySB2TUEgUNmC%2BWE%2FxlxfSNg5fsb0TU9kTVlgZM2MT41XA%3D%3D\"}]}\r\nx-pingback: https://hoshiwatch.top/xmlrpc.php\r\nx-redirect-by: WordPress\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9a5020e1ae480b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":82284,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":530,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/lazy.min.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/js/lazy.min.js HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Dec 2024 08:41:08 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"675015a4-1ed1\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2476\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOyumJcSvZ0oq8N4E9zvq1dd9NEQsaS3akFDct7%2B1EEf6ZIQWVwdvO5i80%2BwmH%2ByaF3U2gyWefylaSO5l9KNVc7fpZmsTBNLORFH2A%3D%3D\"}]}\r\ncf-ray: 9a5020e9b841569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"96201abb62283557a9d7b97b4cab14ab","sha1":"a72f33d920d0ab863df4cb60edf44ec140304cdb","sha256":"46112dbceed738f759d03f04b115d5256a7d73660b7795acb382192ad84d9f98","sha512":"26b2f5c174744de4e87ab925e933c351af75df64b73c1d5478da594479827ba4f14b8dcf14951c1185218c96ff8badeb49dfae46fa7395c18eb6f0bfac341c0e","ssdeep":"192:dIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:d2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"16f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","first_seen":"2023-03-07T01:24:12Z","last_seen":"2026-04-27T13:12:51.174827Z","times_seen":5163,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 01:17:02 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69016b0e-1c679\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2476\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QI51fHqzR3gCSu%2B9fUnI3RfBowa0PmOLBgOzxmOT%2FdUVX%2F6BB%2Fkfo7hwDV3Fo50N%2FP2B3%2BguVsgN4zGAUJR9ubRMwpFVoVrwJt%2Bw2Q%3D%3D\"}]}\r\ncf-ray: 9a5020e9b842569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-27T16:10:36.828154Z","times_seen":167655,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202410/18/152730mozj5ymkv71gjvc1.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202410/18/152730mozj5ymkv71gjvc1.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 199907\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Oct 2024 07:27:30 GMT\r\netag: \"30ce3-624bb3c55bc80\"\r\naccept-ranges: bytes\r\nage: 2476\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUCA3yNJR7nF3AxHKJmt5ZocTJtYrKyO53deINThd11C6lZvqMBcqU7qQGOnOHy15R0wVMgrfH6tMoHIosHd2gO5yG70Ic4PjA%2B8gD6kyZc%3D\"}]}\r\ncf-ray: 9a5020ea2fb9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"4ad21a7f8be9f9b6ea1fe492279cc7f5","sha1":"eb89184e58351641703f128af1dcf5bff38ca745","sha256":"3120750b0f0f4c07c764d2fce138bf06da379265fbe38dfe562ce1f82a263007","sha512":"0b407a8878097ae40867e8286c28638043907104bf62e3b8b31d78e7d7605d37ab24f99af9b0433f216d7ee8e7c8cc8691c7f8fafadeda2b0ed0e09d4cad3469","ssdeep":"3072:4DFxkOUXS4ytk7SRXZ9YvDFHHQYf9OTbEY2sSH9zcsRprmgXFyOtXpc:4DFwXSRkGRXHgJHHQ/sY2s8VcsP7fvc","tlshash":"ee14129b4d5b91258e13c3b502fa25ab93009782be55930cfccb7d81f41936af13be96","first_seen":"2025-11-19T02:08:37.605797Z","last_seen":"2025-12-03T12:26:52.129014Z","times_seen":10,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":8,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/Nix6oVSfS1E/maxresdefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"216.58.207.246","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:42 GMT","end":"Mon, 19 Jan 2026 08:33:41 GMT"},"fingerprint":{"sha1":"A5:AF:4B:FA:75:93:1D:71:E3:13:0F:54:62:E3:C1:CD:54:FA:BB:3C","sha256":"BD:B3:95:9F:5C:41:DD:AB:ED:97:A5:A6:69:97:2C:11:29:D4:2C:22:07:36:93:DD:C7:20:46:DD:57:97:1A:E5"}}},"request":{"raw":"GET /vi/Nix6oVSfS1E/maxresdefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 125679\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\nexpires: Thu, 27 Nov 2025 10:06:51 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1669625882\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"d85b45fdf9495cb390849348b2b374b4","sha1":"456757b9fa494bb98d50cd1e4a4bbcd325bb0580","sha256":"52dc3eda1402970e1bcee20da071105c856078e25ece8b402be8827fca767736","sha512":"cce4d6094684763311b2f0315cce44e870dd72a5424c38787ee287c8a3b0bbc9d0a84d41f0a0cb3cc8bbbe8b6852b47084d924172213c38d881c46d8684e715b","ssdeep":"3072:b7YmzboCV0vlfU3nL1cvg4RQAj36eFRM3Iy8C0fUUzUxg:b7YvtwcvS63dRnC08UzU+","tlshash":"09c3e0daf86414da4f3e9eb108c2a04bc51592b5ef93fc2d2e56ad94e246f0dc34734a","first_seen":"2025-11-23T03:45:15.283037Z","last_seen":"2025-12-03T12:26:52.131888Z","times_seen":9,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":218,"dns":4,"connect":11,"send":0,"wait":112,"receive":40,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fashion-press.net/img/news/93253/AS_FW22_Denim_Personalisation_2-3_PRESS_11.jpg","fqdn":"www.fashion-press.net","domain":"fashion-press.net","tld":"net"},"ip":{"addr":"153.126.241.87","port":443,"asn":7684,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fashion-press.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 16 May 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:89:F2:A0:98:2F:70:5A:9C:76:71:D8:16:75:2B:D0:4D:8E:EA:8F","sha256":"4E:9C:6B:47:E8:A6:ED:3C:3E:8E:A9:F3:76:58:8A:9A:E7:19:79:12:EB:E6:97:E7:DE:B1:17:C0:B3:DE:7A:70"}}},"request":{"raw":"GET /img/news/93253/AS_FW22_Denim_Personalisation_2-3_PRESS_11.jpg HTTP/1.1\r\nHost: www.fashion-press.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Thu, 27 Nov 2025 08:06:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":3161,"timings":{"blocked":1426,"dns":563,"connect":292,"send":0,"wait":286,"receive":0,"ssl":590},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/images/twitter.3.ico","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/images/twitter.3.ico HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/wp-content/themes/swell/assets/css/icon.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:52 GMT\r\ncontent-type: image/x-icon\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 29 Oct 2025 03:22:28 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAt0c%2FQNZjDZ%2BBwzCdHvb4Wvd%2FmdU7YA84OtM1S54sJ1KUAA9YSiNPieyQHaSRAT3Zf%2FUIvj8Msk%2FXRrYcd8uvLhe3bG%2F0yVkaaMEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69018874-225\"\r\ncf-ray: 9a5020ed4859569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9d99a2372bbd5b28ef4b2eaecac8c805","sha1":"6503a35c95cdf2d08ed83e17ae81c8b0e58f49c2","sha256":"cc4939af5d16855f2bea8322dbf33461ebc6bfd092fa3e2291d87d3d83ebd8ed","sha512":"7efba58d391137ea50c0ed95025316e404ce8fed549c386f2d3316d91797cd39e5447db9b0ffdb0ebadbaf1f38766743603c140b8dfb956eccc144aa78cff766","ssdeep":"","tlshash":"06f0eb835322f47ce2c32a41b646d0fce92a472a085c4c0c032da5ba9a5195c9e4b068","first_seen":"2023-07-25T15:05:02Z","last_seen":"2026-04-27T16:03:04.422783Z","times_seen":5779,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oggi.jp/wp-content/uploads/2018/11/1-7-1.jpg","fqdn":"oggi.jp","domain":"oggi.jp","tld":"jp"},"ip":{"addr":"182.236.92.146","port":443,"asn":15830,"as":"Equinix (EMEA) Acquisition Enterprises B.V.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oggi.jp","organization":""},"issuer":{"commonName":"JPRS Domain Validation Authority - G4","organization":"Japan Registry Services Co., Ltd."},"validity":{"start":"Thu, 13 Nov 2025 20:37:13 GMT","end":"Thu, 12 Feb 2026 14:59:59 GMT"},"fingerprint":{"sha1":"D6:46:16:5E:6E:8F:9B:1C:4A:F8:13:AB:DE:2F:AD:CA:67:13:D0:24","sha256":"18:30:6E:9A:5F:27:F2:DD:70:52:5A:AE:B1:F1:5F:39:4C:DE:5D:88:25:E7:36:A7:1B:C4:4D:29:2E:3D:CF:B5"}}},"request":{"raw":"GET /wp-content/uploads/2018/11/1-7-1.jpg HTTP/1.1\r\nHost: oggi.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.26.1\r\ndate: Thu, 27 Nov 2025 08:06:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15966\r\netag: \"3e5e-57b5af5bb61ed\"\r\nlast-modified: Fri, 23 Nov 2018 20:38:03 GMT\r\nx-varnish: 946014500, 480123710 480654651\r\nage: 6\r\nvia: 1.1 varnish (Varnish/6.0), 1.1 varnish (Varnish/6.0)\r\nx-cache-varnish: HIT\r\nvary: \r\nx-cache: HIT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15966,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 320x150, components 3","md5":"fce5e51cc074085ff6ebff07477e7be3","sha1":"37876c9072a44e98deb4f01748789b030e11429d","sha256":"452b89bd929a18d0ffdf10262bedbad47df33eba5c3e1c226864327c6c0eee6d","sha512":"cadf29cdaed41f37268b36889f544a5434a13c9f52099ad065db56072afae3f9a12f6e9692b209fdc33efaeca27bbaad2559cacce92d3f1eea15d4525531f591","ssdeep":"384:fEESZJA7pHY1vhb1e2OZvNwczGGVmAXLsp5LVOFZrVjIzu:fEES7tJhSZ14GVB765LVOFZEu","tlshash":"5e62ce93bad13c11f7ed92b0cb02fab5e517cd8cfe2a20c18981b148798695092ce80f","first_seen":"2025-11-27T08:07:21.704619Z","last_seen":"2025-11-27T08:07:21.704619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3505,"timings":{"blocked":1504,"dns":27,"connect":239,"send":0,"wait":480,"receive":1,"ssl":1250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202508/29/095748rycavvysfu6ccvum.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202508/29/095748rycavvysfu6ccvum.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55894\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 27 Sep 2025 05:48:40 GMT\r\netag: \"da56-63fc1f44a1e00\"\r\naccept-ranges: bytes\r\nage: 2476\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRkcJSWr4K%2FwXo4kslo9yrWQki6qBkR%2B6iG50bOr549YzKpHNkqawjrux0Gq0DbJgzubtGGfGehhBR7aKA95QvTP0PJoueJDhYm%2FajaNU90%3D\"}]}\r\ncf-ray: 9a5020ea2fbcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55894,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x533, components 3","md5":"83cfd966692cb4eca4c6a43c675be384","sha1":"00db8a3605d65c96b98928b4e3180ee02f183ae0","sha256":"68fb6e306bb5ce64c4c4dfe9a52fa8aa1654f763c00ab5d5bea9476cd0c1d4f9","sha512":"a26bad1a7bf61f6dd4c73dc078aec9df2b664dbf1a0f3d0992db1e152609a15a4eba07358036ff63dd5c912b4098a5d664c67d03a1b6ca8be63b4ae02e4d233b","ssdeep":"768:48+cWjnLv97Vtz05T3cMC5LdizJ2knfCZhUNaNTV9nj1qfO2iQRKHf25jqw4x5c7:48+cWjn65ryy2kfmya99qsDCjqwqc7","tlshash":"d34301bc1337db412d62052a2355051ba3de9b2bf4021ed9efd79b346e00ed29e30571","first_seen":"2025-11-19T02:08:37.619559Z","last_seen":"2025-12-03T12:26:52.12138Z","times_seen":10,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images.buyma.com/product-images/tatiana/fashion/accessories/hair-accessory/230109/0090766411/511766052/428/tatiana-fashion-accessories-hair-accessory.jpg","fqdn":"cdn-images.buyma.com","domain":"buyma.com","tld":"com"},"ip":{"addr":"151.101.66.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buyma.com","organization":"Enigmo Inc."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 21 Apr 2025 08:18:24 GMT","end":"Wed, 20 May 2026 14:59:00 GMT"},"fingerprint":{"sha1":"66:7F:43:FA:66:FC:70:C5:7D:EA:A7:FB:E4:ED:B7:B6:E5:3E:1C:68","sha256":"43:F5:1A:83:22:66:1A:D8:0B:D3:5B:2D:12:D1:AE:18:4B:99:4F:EE:2B:9D:DC:BA:33:09:62:37:96:AE:3E:DC"}}},"request":{"raw":"GET /product-images/tatiana/fashion/accessories/hair-accessory/230109/0090766411/511766052/428/tatiana-fashion-accessories-hair-accessory.jpg HTTP/1.1\r\nHost: cdn-images.buyma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: eFPR2nWtOs9pEmx2IeNS7CDL3O9/lD+fvOBZRYA1ZiSmADMEem3+XH+ExPavnuzSU6Wqrs1VTIp8B2ITQRWBS8rYwVko8RAQ\r\nx-amz-request-id: HKSPMXXR44F0G3B2\r\nlast-modified: Mon, 09 Jan 2023 08:15:13 GMT\r\netag: \"a52eec920e376e983020ba27adde8620\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=604800\r\ncontent-type: image/jpeg\r\nserver: AmazonS3\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 841996\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\nx-served-by: cache-tyo11955-TYO, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 0\r\nx-timer: S1764230811.343206,VS0,VE1\r\ncontent-length: 34394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":34394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 428x428, components 3","md5":"a52eec920e376e983020ba27adde8620","sha1":"0886e420f86680bb1c94f02e72f159a2613339b0","sha256":"eb5a10ab75968b909948594f2eb08a1308b2928bde10ceeec8eaa7addb50591b","sha512":"d190bc7b440d7f901ef2052e79a3ec78b3335c4bd1ca2a0c2acc584518051fc3db729310b220ea0df6d059a00d267b834f5fb04f1327c466892eb133ad424891","ssdeep":"768:H1HiJ3O0ayNDOVLtSpFrmMQyCFpIZzxgC4uv/nWIZ/+GuCuDDDDDDDDDDDT:VG3ODzSpVvDRfWIZ/rux","tlshash":"9ef2e13c222f97ca9e4bdbb6c467156561aff0bc2f941c0c506beb4921968d0708d5f3","first_seen":"2025-11-23T13:05:50.704588Z","last_seen":"2025-11-27T13:50:05.311469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":8,"dns":21,"connect":26,"send":0,"wait":27,"receive":11,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:53.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __vtins__KKcdvi8eGnNALXJb=%7B%22sid%22%3A%20%225b15544b-2e08-557d-9329-0d86c161fb64%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201764232611898%2C%20%22ct%22%3A%201764230811898%7D; __51uvsct__KKcdvi8eGnNALXJb=1; __51vcke__KKcdvi8eGnNALXJb=4f9691d9-d053-5cd5-bd3c-1ce9aa89da10; __51vuft__KKcdvi8eGnNALXJb=1764230811903\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:53 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Oct 2025 01:17:00 GMT\r\ncontent-length: 4119\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69016b0c-1017\"\r\nexpires: Sat, 27 Dec 2025 07:25:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2477\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYBxcAxY4DHOTPernOh%2B6f3b3WJdEIGlf8ZnZCvt1KDBsAMEKJ1Z2nPHOZ57duarkXztnJ6fsDN1z%2BUP5l8i5KVcg%2FOvX7O2Rpg1UA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a5020f928b3569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-04-27T16:17:41.666771Z","times_seen":58722,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202510/02/161200dinj4pj4gjhplddh.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202510/02/161200dinj4pj4gjhplddh.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93831\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 08:12:00 GMT\r\netag: \"16e87-640288a2429fa\"\r\naccept-ranges: bytes\r\nage: 2476\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwdOA5lb9TRCtzV2aOY2LLHwhqUQXUBWY71916oIwRF24kNgTuCLbqROpfWNlw7Rz2gsF62dlsn7rUWiZSvPeMavuSHcgf2l2ENWgzIEp6I%3D\"}]}\r\ncf-ray: 9a5020ea2fb6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 900x1012, components 3","md5":"751a6876262887a785d324f7c81af5d7","sha1":"073976531e389f1824f3c89ac44dfb838586ea78","sha256":"46180b18797425d22af8e07b03a8b2296609e367650ba562f1a64fde20abb2da","sha512":"13022b15286fb46f0a04ee5d6f775affe77c1b28f9cd37c09a71d608e9c3cd891cfcc820b95c59e092d9929edb994c2f761fe660ff92b15316c3bd906f44892a","ssdeep":"1536:AJZ2lIHEhL/cAvDxywkp+NJORqJDWfWp6cR5EM2H1tbemXkj7T+x2ATJPWMw:cZ2lIHEF/cAvVywW+HO0IcRg/be5PiJO","tlshash":"1f93f19b9c4aa717f45cd7fe3e1b1de81b28538eb4533aeb46610ec32700a561c8d16e","first_seen":"2025-11-19T02:08:37.627225Z","last_seen":"2025-12-03T12:26:52.122007Z","times_seen":11,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202510/14/105020g8pw5f9lj4dj5lmm.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202510/14/105020g8pw5f9lj4dj5lmm.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68079\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 14 Oct 2025 02:50:20 GMT\r\netag: \"109ef-6411571d3e543\"\r\naccept-ranges: bytes\r\nage: 2476\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ak9dopCnyGJsWghKfvB%2BjTTpZx5BYBCprWUr4t7bZlSkhh2D5JhlFeCYqr722E5fiF2Q6nSWD%2FFaePCtx7DcXXXQNacd2lNlOEmuUw1zHHw%3D\"}]}\r\ncf-ray: 9a5020ea2fbbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68079,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1080x836, components 3","md5":"a27285308a27f5b85aa080028f6649c2","sha1":"efb67436a0bccb5dd6ae9eda3c12b4b8b7389f84","sha256":"5ed75b1957a354f0b838cdb4cf13d82d97e16c4d1fe3256551af5970ae083be7","sha512":"27d508dfc4fc32947f933aab8073e05a7bac16b723d5f44d84d728bb4353b43f51e4e84c2e078a78daa41d37106d63ef9893fbb26d6e5a4fb5caec7878832a93","ssdeep":"1536:t3iJd+IgWe9SoWrkmUzC5E87yS2rOO7VJEvyI7QK0aQ3DEy1dpJcq/t:9LImS/UzC5E8P2rOOHoKDEyuE","tlshash":"3063022da43fb40e828cc9fade7bd382d855cb161f48698d3b6214a39403fc6d55b64a","first_seen":"2025-11-19T02:08:37.606894Z","last_seen":"2025-12-03T12:26:52.134215Z","times_seen":10,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/favicon.ico","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:53.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nCookie: __vtins__KKcdvi8eGnNALXJb=%7B%22sid%22%3A%20%225b15544b-2e08-557d-9329-0d86c161fb64%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201764232611898%2C%20%22ct%22%3A%201764230811898%7D; __51uvsct__KKcdvi8eGnNALXJb=1; __51vcke__KKcdvi8eGnNALXJb=4f9691d9-d053-5cd5-bd3c-1ce9aa89da10; __51vuft__KKcdvi8eGnNALXJb=1764230811903\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-redirect-by: WordPress\r\nlocation: https://hoshiwatch.top/wp-includes/images/w-logo-blue-white-bg.png\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWQzyDPY7liPGPtYqFi1x1BYMPj9HV1AOlGX6MA8MqudEPSA5Sl3YHIzlGjbQixe3gSudgiaUIN9EBWSwprX5j0oc76IBu92mTaqcg%3D%3D\"}]}\r\ncf-ray: 9a5020f5d895569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":534,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":534,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202411/07/152501dduw3hphdsvz8sd3.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202411/07/152501dduw3hphdsvz8sd3.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 88170\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 07 Nov 2024 07:25:01 GMT\r\netag: \"1586a-6264d8847ad40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9heGT99nyq3Q3GcCB2%2Bk7uemG5uSG9z9jJdWlkdLOh0TilMQshcsVlX30CeQGXo3SbOHtyR69Lix8xDeEQzq9YI3E%2F5HhJSBIxAL2gP5pPY%3D\"}]}\r\ncf-ray: 9a5020ea685eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88170,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 1080x1239, components 3","md5":"ded2bdc2993dd9d5eac1a29003d35bb1","sha1":"5f6fac512d8199f84818070e9d71ab19316d91a8","sha256":"54f63fa45a1e95693e695ae471841065a096a7047ee06f25dd6de8b9bdf65d49","sha512":"666d49c5214b8b283fc2103939d6650b8d2778ae6461616a688db5f5656f39ce2eb248c601b2c74f343c4242e0686e309b6198fc208aa19bfd4acf837fe2a2ae","ssdeep":"1536:aAOizlN0fRALX7rcnXr/DqD3tRVijkGVb45CPuPJbiD8hYrWS5Re8oBm2jqKq436:jUJce/+slDmB27Z5Re8oBm2LqZ","tlshash":"b583d047ce584b83d029c3a47f471eac5f4e2a9da8c138ef08214ddba9206772c4e97d","first_seen":"2025-11-23T03:45:15.268137Z","last_seen":"2025-11-27T13:50:05.30886Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":57,"dns":3,"connect":1,"send":0,"wait":467,"receive":462,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202411/04/113516annfbtbsqrpnfzpn.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202411/04/113516annfbtbsqrpnfzpn.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 299552\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 04 Nov 2024 03:35:16 GMT\r\netag: \"49220-6260df91b2500\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dokxEn0oURJ%2FCvsIS39T4UOUq1U%2BD3%2BNz8sH5X%2Bx3Fxk3%2BQuQx3yvigAJ3QvLyHBPg4Iy26nir6SXlB25JC9j2vo0IdANl8WsmwNiH17A6s%3D\"}]}\r\ncf-ray: 9a5020ea787ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 1080x1440, components 3","md5":"5f3a2751539c7bc1c509a5516643ef34","sha1":"f296e9002612c463017ba547a80336419d000c37","sha256":"5a436e97d8d8c2774a33020586e6c9e0397f1a41ddca229e9f976395d6dd8e64","sha512":"83dfa0cf40e3981b1cb335f25c8dfcad55cd4e2d051fe9ab025a6f340b76384373a09ff24215efb27f3f4f1bcd4bb5f35b4b0e8cc22c66d7f6dd1b6a8e441686","ssdeep":"6144:MsldHjXkIB9cbsQE6CpTCRMq+h8oExW5PAbwwoPlbWhKcXLWF9T8pRP:M6D/9r6e+RMq+Kq2wtPhyEof","tlshash":"af5423e56a148634d507eaca3271892ff7a0352ab3103f15bcc35f9051bc8b1616bbeb","first_seen":"2025-11-23T03:45:15.250427Z","last_seen":"2025-11-27T13:50:05.316132Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1675,"timings":{"blocked":59,"dns":6,"connect":3,"send":0,"wait":517,"receive":1025,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/style.css?ver=1764230810","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/style.css?ver=1764230810 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 03:40:44 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69018cbc-3034d\"\r\nexpires: Thu, 27 Nov 2025 20:06:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJM3EDrQB%2FZs1P2Ti98JuA9%2FJI50aBZCaKGzIGKLbM4MZUegsxxzfdV4JT958ad2z9JgellBbucCglxSWwBfplgn9wXYdpp%2FruS2pA%3D%3D\"}]}\r\ncf-ray: 9a5020e9b83e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197453,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (427)","md5":"fced29da5662c662107cc54a25ab90ed","sha1":"9f042de567afed8d340cc775b48fc106d06e049f","sha256":"ec165cb371bff6c34389d0cf15e90210b6c0fc11e7070d9c67c5c61b59a855f7","sha512":"72c1c733f3ed8a71c900209d70a07d05bdc407ed347366fad5aaf0f922ba3b8e7ced9a12c5f6023ae87436c3cdd81bd8b87207b4338f7a66d4b29d921eaf7faf","ssdeep":"6144:ibyKrTkHOFJs62zL2FsAO3O8/Olrt+jwZ2tJ0/6t+OTQOOVgfsd2xe8s5RZwdbXC:ibyKrTkHOFJs62zL2FsAO3O8/Olrt+j4","tlshash":"ad143f60a6b31c95611fd1582faab750732982c3d50fcdb8bf9976588fc43a0d5b2f88","first_seen":"2025-11-17T08:30:12.533263Z","last_seen":"2025-12-03T18:18:06.422635Z","times_seen":38,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/jquery.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/js/jquery.js HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Jul 2025 08:30:18 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6881ef1a-17a69\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2476\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ay61CcN8GpNe0%2BKj4FUb9VKW4sLoLQgDfJGWgw5IZGLfnVP8cv1WKTRivsGMm8CfA96HjvmFhtoxnjw1RFJIX3qBp1NkWU3wGfGJdQ%3D%3D\"}]}\r\ncf-ray: 9a5020e9b840569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96873,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"49edccea2e7ba985cadc9ba0531cbed1","sha1":"f8747f8ee704d9af31d0950015e01d3f9635b070","sha256":"1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df","sha512":"f766df685b673657bdf57551354c149be2024385102854d2ca351e976684bb88361eae848f11f714e6e5973c061440831ea6f5be995b89fd5bd2d4559a0dc4a6","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVyp3:fsAg0psxTva/FSeKy2bDD5a98Hrq","tlshash":"f893e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-04-27T16:20:25.849445Z","times_seen":19870,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202410/18/153851tj00g7esx4w1zcex.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202410/18/153851tj00g7esx4w1zcex.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 195229\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Oct 2024 07:38:51 GMT\r\netag: \"2fa9d-624bb64ecf8c0\"\r\naccept-ranges: bytes\r\nage: 2476\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6m84S6Vn9TVz7r81F2Gtz74wet6f1ze2VvPDzggwjx%2Flx1%2F45x%2Favh4OkTxTkNgqZ%2F98YJ7tzZp%2BzjiUONkcdQcwmnMnN%2BEbEW0%2FiS4zhI%3D\"}]}\r\ncf-ray: 9a5020ea2fb7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"cfa9cc3bff661db5482142247483e5ff","sha1":"b81360ce40b4d12a6faf30a6e93e8fb40a30e510","sha256":"aac08f1184a63c279fe38212ee2b0ef88801fa80aa410a31f999e9661823ee4e","sha512":"b84b3354a75dacf85f48cab77c2cd0ba67890b9bd5b040fdc1bcc932fb7bef1e7f760dd76a44ff8362e13af5ab97a60d11a0534669315a8fedd097223e8b5b3c","ssdeep":"3072:xGhL/F3i9/muGKx91E++jMXHTrtowJMCd5jNcRFeGhoJ:CBvKqxMXHTrayMCd5mfC","tlshash":"c21412182296d1feeb0ccbbb23056e5603cbd35154a907fe509f4e29caa31ad64f9067","first_seen":"2025-11-19T02:08:37.62503Z","last_seen":"2025-12-03T12:26:52.13814Z","times_seen":10,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":12,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202506/25/161226y77quy8zgklu3suu.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202506/25/161226y77quy8zgklu3suu.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 124829\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Jun 2025 08:12:26 GMT\r\netag: \"1e79d-63861015b2e80\"\r\naccept-ranges: bytes\r\nage: 2476\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYvcj4nM21CkvBXzxo4qF8lTVPflZWUcNuUZh%2FeBFV6DJdDHfHIrLwu2PUF22HpF0VDSu5PK9o0tGXoLXylIXz2Zp3eaTKkAg3AVgaUQn6Q%3D\"}]}\r\ncf-ray: 9a5020ea2fc0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124829,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1080x1440, components 3","md5":"32c62b2118983b2e28a9f26d919b5267","sha1":"5a49b5937eb67f5910b1bc58affef17337b580d2","sha256":"37f9787921f730e25b02955d175d41967689ba893be985b84569c99a835e5add","sha512":"55066a584ed480c81fea2fe550871e3fe5632172ad82f7edfacb0a257133029ed76e52039efe26b7c969890d1762fa6738d9c0272ef6464c7b1576c016c2d3cf","ssdeep":"3072:xc3F6+wpeVJN2VKnmPltiwPu8tC3rNwrIioGrO:a39N2V0m+wgrapoGq","tlshash":"17c312ae3737f9928d71fb350bc861c091692f1da9994bdb7285dad8925274c3880ac8","first_seen":"2025-11-19T02:08:37.604773Z","last_seen":"2025-12-03T12:26:52.126237Z","times_seen":10,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fashion-press.net/img/news/90740/hUI.jpg","fqdn":"www.fashion-press.net","domain":"fashion-press.net","tld":"net"},"ip":{"addr":"153.126.241.87","port":443,"asn":7684,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fashion-press.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 16 May 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:89:F2:A0:98:2F:70:5A:9C:76:71:D8:16:75:2B:D0:4D:8E:EA:8F","sha256":"4E:9C:6B:47:E8:A6:ED:3C:3E:8E:A9:F3:76:58:8A:9A:E7:19:79:12:EB:E6:97:E7:DE:B1:17:C0:B3:DE:7A:70"}}},"request":{"raw":"GET /img/news/90740/hUI.jpg HTTP/1.1\r\nHost: www.fashion-press.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Thu, 27 Nov 2025 08:06:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":1706,"timings":{"blocked":7,"dns":530,"connect":287,"send":0,"wait":286,"receive":0,"ssl":596},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-27T08:06:50.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/ HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dP%2FHr6r9M1qE2OsmSU4EWMIB41GjAiCltnMIPQPJkIZ%2B1Ea98d%2BmrRbm5xrzK0JQv2KJr1FeOh1joI2k5jyILN5F%2F%2B0SZONmwwRAKw%3D%3D\"}]}\r\nx-pingback: https://hoshiwatch.top/xmlrpc.php\r\nlink: \u003chttps://hoshiwatch.top/?p=212\u003e; rel=shortlink\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a5020e4f88e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":82284,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"eb31865271a0c65310669901661cee3c","sha1":"eca02df4ab59983add561adff444edcb4f9195b5","sha256":"0f4999b35b648ec0ec292d2ba0d7864571338947794a076446590c447bd26ce7","sha512":"df61e994d9d314f377aafcef465b97393c6119fc664cc108c14d2895114c80588e26855ca898b8cf6571734e50e8ae4162a082af3c7e6f427c49878f49d0e3a0","ssdeep":"768:gqZdapzdgx6pNKa7CniyFLroDF8XZX+WWhfb0zHfxnnRK0cyjaohjObVE/clCnov:gSappC6pNbylroZ4fTjUon0Lp","tlshash":"e583957d73d7203a5e27a2e49449362861cb4daed9f22b1278fcd4146b90fcea54307e","first_seen":"2025-11-27T08:07:21.721897Z","last_seen":"2025-11-27T08:07:21.721897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 473\r\nOrigin: https://hoshiwatch.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://hoshiwatch.top\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\neo-log-uuid: 5398258379212634892\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/css/icon.min.css","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/css/icon.min.css HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 03:41:08 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69018cd4-68bc\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 2476\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQiGWvYD13IFeZzIy0hbY6KP7PfcPC3wluGoxwy%2Brk%2BDf%2BDc%2FCBrJZn4xhkMtj7mLs%2FO0vnommzkxqIx8F5L%2BTsHiRwTeE7RRicGOA%3D%3D\"}]}\r\ncf-ray: 9a5020e9b83f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26812,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c64f22433a90f38add2c8aac0a223fa0","sha1":"7a04de6ee1f5ab7c8a185274343c67c8f8c5c675","sha256":"f0669d5570d0890ed5c77e48fc9c182390ec9d022b775986e6c74a74e76fbe56","sha512":"90da6c10162ec245008d98293f396ba36f9f7247c719886980cdb574c2b99defb06c99d7971bcbabf26834c24a1f473c6ecce42c98142a93651b10477bd21b0c","ssdeep":"192:fyHGO2p/IAKtwmklVK7BQhnOGaoM7Pz4Mo8Q+8hk199JlbRKCUcL:Y2hIjm1lVK7OhnOGaoM7Pz4Mour9oChL","tlshash":"24c29db4dc2e01911722d9e193472512ef15b276ee426d5ef293ea8c9bf632484c2fdc","first_seen":"2025-11-13T01:15:04.23896Z","last_seen":"2025-12-08T10:38:20.86681Z","times_seen":234,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202411/06/174319udhhmuwod839w8pm.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202411/06/174319udhhmuwod839w8pm.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 196331\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Nov 2024 09:43:19 GMT\r\netag: \"2feeb-6263b5909bbc0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryIsLPla2FlJSJhv054e9SiNZY1otTVx9ytT8p0HmjCwq372RUoiav%2BuXgrx3bskRmb5r67kIkGXkuraYvMDnFQEUe8eOhxKqg2KkatnKmQ%3D\"}]}\r\ncf-ray: 9a5020ea6854b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196331,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 1080x1440, components 3","md5":"f695f00b50e26f44078db30066f97728","sha1":"9f815726b695526507d6c0595b57568df4a8e197","sha256":"7d019bec0bf7e27e7fa365dadeb7abef327aaa473c1d54bca803ed17f5221eab","sha512":"af1fcde75abfaa5b7459aab57b25a2433857771c4827cb8597817ec3da5427b09da664ad0bd5778c4ce21d83257e135257433802c26aeea80f7daecf23018640","ssdeep":"3072:SJQWF5GEyrIo/ZEINr8ukXuGsiC3ic/FwgVjMIvn/TU1z2GZp0fP1iNx+s2tbSC:GF5CIo/aINAukXVsnSAwGMI/g16GgfPz","tlshash":"e81423aaef87e6c0c5a12e4360c7a15f035439b44a792d1f8f32d6107b22d947e54bf2","first_seen":"2025-11-23T03:45:15.244575Z","last_seen":"2025-11-27T13:50:05.315547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1351,"timings":{"blocked":59,"dns":0,"connect":1,"send":0,"wait":487,"receive":722,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jackroad.co.jp/img/benefit/9/148393_im.jpg","fqdn":"www.jackroad.co.jp","domain":"jackroad.co.jp","tld":"co.jp"},"ip":{"addr":"3.167.2.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/04/06/%E3%83%87%E3%82%A3%E3%82%AA%E3%83%BC%E3%83%AB%E3%81%AE2024%E5%B9%B4%E6%98%A5%E3%81%AE%E3%83%90%E3%83%83%E3%82%B0%E3%81%8C%E3%80%81%E3%83%91%E3%83%AA%E3%83%95%E3%82%A1%E3%83%83%E3%82%B7%E3%83%A7/","date":"2025-11-27T08:06:51.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jackroad.co.jp","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 14 Oct 2025 07:23:32 GMT","end":"Sun, 15 Nov 2026 07:23:31 GMT"},"fingerprint":{"sha1":"E1:70:A1:33:7B:E8:FD:39:45:25:B1:DD:60:13:35:3F:2E:CC:22:DE","sha256":"23:D0:9D:9D:1C:E7:61:13:11:E8:D9:13:F6:DF:5C:AD:F2:27:B4:CE:66:C1:42:74:B1:2D:75:45:2A:12:A9:B9"}}},"request":{"raw":"GET /img/benefit/9/148393_im.jpg HTTP/1.1\r\nHost: www.jackroad.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 236636\r\nlast-modified: Wed, 26 Nov 2025 14:28:39 GMT\r\naccept-ranges: bytes\r\nserver: \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-lightfile-proxy: webp-hit\r\ndate: Thu, 27 Nov 2025 08:06:51 GMT\r\ncache-control: max-age=86400\r\netag: \"1764167319-39ead\"\r\nvary: Accept,accept-encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 16015e09e0d70f7cc17ec5c4f52b310e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: BHu6vrAx7S9MSk2rox_gWPBmGAeDuSfYvOo46uQinNNSy9xloeiMVg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":236636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x2000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"236835d424473b7392572836b87e095b","sha1":"ef4806455f9c3ed992acd4ddaeb5ee1e3f362a5a","sha256":"2d02399e795c8b6d04d56da364c28c67dce6dea83859c7b72ffc73c075b4ba86","sha512":"fdab136f318379fa4a3efe73bc228b04c884fd96a67ccdffa32e5f4a4c9e564dd230a9e5c8bd4f29f4af59c705a2b51295939b23693412f4512eec87b91ceae2","ssdeep":"6144:TU5dK2hgEV7357R8QKCLqLikqkEhxyFkV4kDI5iR:adKE7757/0ikWhxyKG8+k","tlshash":"803422e74573c1be1f826b313fa75f8f0ae40a5aa843b1be09f9ad011541229656fd8c","first_seen":"2025-11-25T12:54:20.902858Z","last_seen":"2025-12-03T12:26:52.135687Z","times_seen":7,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":192,"dns":32,"connect":7,"send":0,"wait":502,"receive":7,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}