{"report_id":"2504d0ad-b15d-4aae-8708-e9d4a372bb91","version":0,"status":"done","tags":[],"date":"2026-07-22T21:53:27Z","url":{"schema":"https","addr":"catsxp.com.cn/","fqdn":"catsxp.com.cn","domain":"catsxp.com.cn","tld":"com.cn"},"ip":{"addr":"166.75.147.27","port":0,"asn":0,"as":"","country":"Chile","country_code":"CL"},"final":{"url":{"schema":"https","addr":"catsxp.com.cn/","fqdn":"catsxp.com.cn","domain":"catsxp.com.cn","tld":"com.cn"},"title":"猫眼浏览器 - 轻量绿色Chromium浏览器 | 无广告无捆绑 极简高速网页浏览","dom":{"size":1901,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a77f8a50093e885d619fbff0db9c09c8","sha1":"7d2e518c42ea6ed31af013597aa431fed70e514c","sha256":"d53e0afbdf12c6e5fc5fa60f9ecff345e1228757308cef728e731637dbdd1a49","sha512":"aed63ceb556aadc70809c7cf37e2acd10ffe94c95c43c619f5e3950ed7ab7e030d26070b113744db517b8dbc5bff4ec1005fdbf2059a9e3e5786f88523ed8f05","ssdeep":"","tlshash":"3841c0b315e18c2c127ac1853edaf90589ba5453c9242d11f6991bde0fc4f8641e727f","dom_hash":"domhash2246ad1fcc4a1fa7edd5481c63893353","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"catsxp.com.cn/","fqdn":"catsxp.com.cn","domain":"catsxp.com.cn","tld":"com.cn"},"ip":{"addr":"166.75.147.27","port":0,"asn":0,"as":"","country":"Chile","country_code":"CL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T21:53:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"catsxp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"catsxp.com.cn","ip":{"addr":"166.75.147.27","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"domain_registered":"2026-06-23","domain_rank":0,"first_seen":"2026-07-22T21:53:27.731306Z","last_seen":"2026-07-22T21:53:27.731306Z","alert_count":3,"request_count":3,"received_data":149574,"sent_data":1486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-07-21T14:51:37.449103Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":470,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"catsxp.com.cn/","fqdn":"catsxp.com.cn","domain":"catsxp.com.cn","tld":"com.cn"},"ip":{"addr":"166.75.147.27","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T21:52:51.612Z","timestamp":1784757171612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.catsxp.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 08:04:42 GMT","end":"Tue, 22 Sep 2026 08:04:41 GMT"},"fingerprint":{"sha1":"38:2F:41:28:78:A1:39:8D:8E:BB:F2:A9:FF:44:41:2D:07:6D:13:B7","sha256":"3F:0D:8E:B1:CE:D2:1B:E5:01:B7:29:4E:22:2F:BB:78:95:6F:65:52:82:89:E6:2E:28:42:5C:91:91:9E:28:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: catsxp.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 21:52:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jul 2026 10:08:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60968c-eb93\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60307,"size_decoded":11583,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387)","md5":"412ddfebacaf6c6630c5f8e483ef861c","sha1":"5cfd47f40cad9f78a66583df9028b6643a14b137","sha256":"5483959c41b375284e58f94ab715429be9cd419743e217d71d263f7877a2e7b0","sha512":"42549ee5dfff299a370cd65a98149c0d5e548845a03e854cb8bf3ef16445b3cfecf04bb21b2aac94ad8032eb5543887176d6dcda052b0a92274340ffd9781f62","ssdeep":"1536:7ipuVauSwuouDWo9pgTUuDBbR73Cud4atZrZuA5IOP4IIYg:7OuXuruuuGybC","tlshash":"dd43625b15f360762923b0fa2bff0b4672b5d403c40acd253eac474c8f95998aa93b5d","first_seen":"2026-07-22T21:53:30.78717Z","last_seen":"2026-07-22T21:53:30.78717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1413,"timings":{"blocked":-1,"dns":423,"connect":246,"send":0,"wait":246,"receive":0,"ssl":498},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"catsxp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://catsxp.com.cn/","date":"2026-07-22T21:52:53.756Z","timestamp":1784757173756,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://catsxp.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T00:24:31.034548Z","times_seen":17464322,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"catsxp.com.cn/logo.png","fqdn":"catsxp.com.cn","domain":"catsxp.com.cn","tld":"com.cn"},"ip":{"addr":"166.75.147.27","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catsxp.com.cn/","date":"2026-07-22T21:52:53.763Z","timestamp":1784757173763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.catsxp.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 08:04:42 GMT","end":"Tue, 22 Sep 2026 08:04:41 GMT"},"fingerprint":{"sha1":"38:2F:41:28:78:A1:39:8D:8E:BB:F2:A9:FF:44:41:2D:07:6D:13:B7","sha256":"3F:0D:8E:B1:CE:D2:1B:E5:01:B7:29:4E:22:2F:BB:78:95:6F:65:52:82:89:E6:2E:28:42:5C:91:91:9E:28:9D"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: catsxp.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://catsxp.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 21:52:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Mar 2020 15:28:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e611a80-abb4\"\r\nexpires: Fri, 21 Aug 2026 21:52:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43956,"size_decoded":27355,"mime_type":"image/png","magic":"MS Windows icon resource - 4 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 64x64, 32 bits/pixel","md5":"62734fbd24e8faf61d114743da7fd47c","sha1":"f2ca9196bcfb1f77aa595fffd669bddc3bb1afd8","sha256":"408d1adf667cb090ed08c6416ccbe6e86dfecd1795cc9a25846dcbfca57440cc","sha512":"5cf3605baf2bfa6be7901d4e5295c59a43d6808bd1a9e3f1e8f1d4daf4c3f434b20affc0c9f5e902ed4e82cc79d4b7b9ad8b690d265308e30d04cd321560d75c","ssdeep":"768:qWcCzSWyoVJAnpWBZss+rngqcpOOJJHFIGSZPIjeclV83:qRdWfOpkZszrngqcpOOjHFIGStIyV","tlshash":"97132bd9f192d6a0e5cb7c3debb2e164a711a1329f0605c3c76c6ae1c17e683c86dd24","first_seen":"2025-01-04T18:15:17.038558Z","last_seen":"2026-07-22T21:53:30.78931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"catsxp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"catsxp.com.cn/favicon.ico","fqdn":"catsxp.com.cn","domain":"catsxp.com.cn","tld":"com.cn"},"ip":{"addr":"166.75.147.27","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://catsxp.com.cn/","date":"2026-07-22T21:52:55.249Z","timestamp":1784757175249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.catsxp.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 08:04:42 GMT","end":"Tue, 22 Sep 2026 08:04:41 GMT"},"fingerprint":{"sha1":"38:2F:41:28:78:A1:39:8D:8E:BB:F2:A9:FF:44:41:2D:07:6D:13:B7","sha256":"3F:0D:8E:B1:CE:D2:1B:E5:01:B7:29:4E:22:2F:BB:78:95:6F:65:52:82:89:E6:2E:28:42:5C:91:91:9E:28:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: catsxp.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://catsxp.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 22 Jul 2026 21:52:55 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 05 Mar 2020 15:28:00 GMT\r\netag: \"5e611a80-abb4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43956,"size_decoded":44353,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 64x64, 32 bits/pixel","md5":"62734fbd24e8faf61d114743da7fd47c","sha1":"f2ca9196bcfb1f77aa595fffd669bddc3bb1afd8","sha256":"408d1adf667cb090ed08c6416ccbe6e86dfecd1795cc9a25846dcbfca57440cc","sha512":"5cf3605baf2bfa6be7901d4e5295c59a43d6808bd1a9e3f1e8f1d4daf4c3f434b20affc0c9f5e902ed4e82cc79d4b7b9ad8b690d265308e30d04cd321560d75c","ssdeep":"768:qWcCzSWyoVJAnpWBZss+rngqcpOOJJHFIGSZPIjeclV83:qRdWfOpkZszrngqcpOOjHFIGStIyV","tlshash":"97132bd9f192d6a0e5cb7c3debb2e164a711a1329f0605c3c76c6ae1c17e683c86dd24","first_seen":"2025-01-04T18:15:17.038558Z","last_seen":"2026-07-22T21:53:30.78931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"catsxp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}