{"report_id":"2592cc86-94fc-463b-a928-3f7f9b141ca1","version":6,"status":"done","tags":[],"date":"2025-11-27T07:25:55Z","url":{"schema":"http","addr":"hoshiwatch.top/2024/12/16","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hoshiwatch.top/2024/12/16/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"title":"2024年12月16日 – 最新の業界ニュースとトレンドをお届け","dom":{"size":53886,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"e58ee86fe11e7428930d00862db063ed","sha1":"93b9d9c723c69dbc44071443d096a3e99793610d","sha256":"c6183f9ed7298e558727e1a8b746db0b17a1a67bdd1dfe0fe9d7dc7c60dcc348","sha512":"a7ce84687a18b04b03499574be4f1d55eefde729e38b00d53702c32839006ab7db140bbb50dc1b96ecdfd151431ef5b102f40143eac0012c1a17f9cdba8a1482","ssdeep":"768:B1Zdapz6rO190zB0zyydYhDmObVE/clCnoM2Q00F:Bdapwh5yGnoj00F","tlshash":"4233727e73d6202b6f27e2e995453328a08b49aec9f11e0278fcd5146b90fde255307e","dom_hash":"domhash1294931b5d06012ed2041c0a39d10dad","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hoshiwatch.top/2024/12/16","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"104.21.42.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-01T07:25:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.fashion-press.net","ip":{"addr":"153.126.241.87","port":443,"asn":7684,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"domain_registered":"2006-03-23","domain_rank":33909,"first_seen":"2014-06-19T08:31:42Z","last_seen":"2025-11-21T04:21:48.014427Z","alert_count":0,"request_count":2,"received_data":284,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2025-11-24T02:10:19.199879Z","alert_count":0,"request_count":1,"received_data":358,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2025-11-23T23:06:06.069734Z","alert_count":0,"request_count":1,"received_data":126352,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-images.buyma.com","ip":{"addr":"151.101.66.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2004-01-19","domain_rank":293865,"first_seen":"2022-03-11T11:33:01Z","last_seen":"2025-11-21T00:42:01.675585Z","alert_count":0,"request_count":1,"received_data":35039,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.cdnthumb.com","ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-12","domain_rank":0,"first_seen":"2024-12-29T18:00:44.186245Z","last_seen":"2025-11-25T00:43:23.607901Z","alert_count":0,"request_count":7,"received_data":751848,"sent_data":3368,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hoshiwatch.top","ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2025-11-19T02:08:26.032534Z","last_seen":"2025-11-19T02:08:26.032534Z","alert_count":10,"request_count":10,"received_data":674859,"sent_data":5571,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.jackroad.co.jp","ip":{"addr":"65.9.46.77","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-08-12","domain_rank":128899,"first_seen":"2014-10-25T11:36:40Z","last_seen":"2025-11-21T04:47:32.156211Z","alert_count":0,"request_count":1,"received_data":237179,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/lazy.min.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96201abb62283557a9d7b97b4cab14ab","sha1":"a72f33d920d0ab863df4cb60edf44ec140304cdb","sha256":"46112dbceed738f759d03f04b115d5256a7d73660b7795acb382192ad84d9f98","sha512":"26b2f5c174744de4e87ab925e933c351af75df64b73c1d5478da594479827ba4f14b8dcf14951c1185218c96ff8badeb49dfae46fa7395c18eb6f0bfac341c0e","ssdeep":"192:dIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:d2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"16f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","size":7889,"data":"","first_seen":"2023-03-07T01:24:12Z","last_seen":"2026-04-27T13:12:51.174827Z","times_seen":5163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/jquery.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49edccea2e7ba985cadc9ba0531cbed1","sha1":"f8747f8ee704d9af31d0950015e01d3f9635b070","sha256":"1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df","sha512":"f766df685b673657bdf57551354c149be2024385102854d2ca351e976684bb88361eae848f11f714e6e5973c061440831ea6f5be995b89fd5bd2d4559a0dc4a6","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVyp3:fsAg0psxTva/FSeKy2bDD5a98Hrq","tlshash":"f893e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","size":96873,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-04-27T16:20:25.849445Z","times_seen":19870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/2024/12/16/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"54add3968f32fde494dd79e312f63418","sha1":"509255fc68d07afb3e61144fd7de8839d865a700","sha256":"5fccfc53a2301ac575e6e08a64c58113cb04066b19a5980b3a3fa01984e89ee0","sha512":"bc3dc4e2b7938703d46d1b66968ac809f8abb3865baa7b69d26e3558338cd2eff0ef5350e975d961ecaa90d9dfe73cfdaa19ec56bb1c8207239fdb003037233a","ssdeep":"","tlshash":"20d08c2bb486a0fae0376928b23b5220309a3c1bb004a001365d80b14f034003032235","size":219,"data":"","first_seen":"2025-11-04T12:19:06.397904Z","last_seen":"2025-12-03T02:43:18.476642Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/2024/12/16/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"442c7bf255707a0ad21141e0fc1f2797","sha1":"59da82a255d67448e1648c1e78d3a36523b1121e","sha256":"724d790e94570eb0edb403ad80a5203dd5e589cf896dd9029b200869116eb211","sha512":"472569710643229a5626928b6230f5fd49f52e38439bed1d2d072236c0d4b42d8d0879956f12d9b3b8f51dda54e07161e784ae8cf7a3d7ec3a1708b9dca6079d","ssdeep":"","tlshash":"ef41e07df4ea36f5073731b0da7f370638b920a7b645e40838ad41841fa5862397c5ab","size":2179,"data":"","first_seen":"2025-11-13T01:15:04.282049Z","last_seen":"2025-12-01T23:30:43.852873Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js?id=KKcdvi8eGnNALXJb\u0026ck=KKcdvi8eGnNALXJb","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-04-27T14:26:20.594405Z","times_seen":87395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202508/29/095748rycavvysfu6ccvum.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202508/29/095748rycavvysfu6ccvum.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55894\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 27 Sep 2025 05:48:40 GMT\r\netag: \"da56-63fc1f44a1e00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueImdrEMXDQ%2F0I04Nw233wyYwB%2Fkj3NTVRr2DNkY3rsGP%2B7ZzubOM1P9JchKM%2BvsQzIb1lZHKeIPc0k%2FR4TwQNotKTfgA2LR2XfLxDf1lK8%3D\"}]}\r\ncf-ray: 9a4fe470883832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55894,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x533, components 3","md5":"83cfd966692cb4eca4c6a43c675be384","sha1":"00db8a3605d65c96b98928b4e3180ee02f183ae0","sha256":"68fb6e306bb5ce64c4c4dfe9a52fa8aa1654f763c00ab5d5bea9476cd0c1d4f9","sha512":"a26bad1a7bf61f6dd4c73dc078aec9df2b664dbf1a0f3d0992db1e152609a15a4eba07358036ff63dd5c912b4098a5d664c67d03a1b6ca8be63b4ae02e4d233b","ssdeep":"768:48+cWjnLv97Vtz05T3cMC5LdizJ2knfCZhUNaNTV9nj1qfO2iQRKHf25jqw4x5c7:48+cWjn65ryy2kfmya99qsDCjqwqc7","tlshash":"d34301bc1337db412d62052a2355051ba3de9b2bf4021ed9efd79b346e00ed29e30571","first_seen":"2025-11-19T02:08:37.619559Z","last_seen":"2025-12-03T12:26:52.12138Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1214,"timings":{"blocked":99,"dns":43,"connect":6,"send":0,"wait":497,"receive":487,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202506/25/161226y77quy8zgklu3suu.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202506/25/161226y77quy8zgklu3suu.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 124829\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 25 Jun 2025 08:12:26 GMT\r\netag: \"1e79d-63861015b2e80\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stp7yh3fqfLTj56oflVLJ44Nt3GqgeQbRWPR9j4%2BXWS8zxIoj%2BrfxjNkewePy1s9%2F6DXBqwVdUaSY%2BkmkkMerUzIGbmwYIHHC755UQC%2FmqE%3D\"}]}\r\ncf-ray: 9a4fe4707fe132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124829,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1080x1440, components 3","md5":"32c62b2118983b2e28a9f26d919b5267","sha1":"5a49b5937eb67f5910b1bc58affef17337b580d2","sha256":"37f9787921f730e25b02955d175d41967689ba893be985b84569c99a835e5add","sha512":"55066a584ed480c81fea2fe550871e3fe5632172ad82f7edfacb0a257133029ed76e52039efe26b7c969890d1762fa6738d9c0272ef6464c7b1576c016c2d3cf","ssdeep":"3072:xc3F6+wpeVJN2VKnmPltiwPu8tC3rNwrIioGrO:a39N2V0m+wgrapoGq","tlshash":"17c312ae3737f9928d71fb350bc861c091692f1da9994bdb7285dad8925274c3880ac8","first_seen":"2025-11-19T02:08:37.604773Z","last_seen":"2025-12-03T12:26:52.126237Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":472,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/12/16/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 01:17:02 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69016b0e-1c679\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJzlderXBRLcGDNvbnlvyHxCTwP1DOuiBonKm69OIa7Ri4cApspfgTgFjVLB0jWReFaZlIqpJ1zYSydZtjlTOx023MMDirN7bJnzlA%3D%3D\"}]}\r\ncf-ray: 9a4fe46fbe7bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-27T16:10:36.828154Z","times_seen":167655,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202510/02/161200dinj4pj4gjhplddh.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202510/02/161200dinj4pj4gjhplddh.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93831\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 02 Oct 2025 08:12:00 GMT\r\netag: \"16e87-640288a2429fa\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGyacm1R5zSNZky1rlX7bj%2B8%2B2KWCkNW75V71x6RIdelpuJuErHHI96NVDWaqvgIik4gKvUyIwyn01c22Lvn8VqAButrJ7HeZeLsBwx7hPM%3D\"}]}\r\ncf-ray: 9a4fe4707fe232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 900x1012, components 3","md5":"751a6876262887a785d324f7c81af5d7","sha1":"073976531e389f1824f3c89ac44dfb838586ea78","sha256":"46180b18797425d22af8e07b03a8b2296609e367650ba562f1a64fde20abb2da","sha512":"13022b15286fb46f0a04ee5d6f775affe77c1b28f9cd37c09a71d608e9c3cd891cfcc820b95c59e092d9929edb994c2f761fe660ff92b15316c3bd906f44892a","ssdeep":"1536:AJZ2lIHEhL/cAvDxywkp+NJORqJDWfWp6cR5EM2H1tbemXkj7T+x2ATJPWMw:cZ2lIHEF/cAvVywW+HO0IcRg/be5PiJO","tlshash":"1f93f19b9c4aa717f45cd7fe3e1b1de81b28538eb4533aeb46610ec32700a561c8d16e","first_seen":"2025-11-19T02:08:37.627225Z","last_seen":"2025-12-03T12:26:52.122007Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1138,"timings":{"blocked":88,"dns":45,"connect":1,"send":0,"wait":470,"receive":463,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202410/18/153851tj00g7esx4w1zcex.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202410/18/153851tj00g7esx4w1zcex.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 195229\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Oct 2024 07:38:51 GMT\r\netag: \"2fa9d-624bb64ecf8c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzEgEomccgylVFS04qFe7%2FyV%2BBYGbpUQmWUUiHfqu8cEVefPw%2B0dZ7%2F2pUHDhYKZNzQLO0l2QZp8h7nZy4gMTaO06K9gdQbFAivjrDIiCL4%3D\"}]}\r\ncf-ray: 9a4fe4707ff332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195229,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"cfa9cc3bff661db5482142247483e5ff","sha1":"b81360ce40b4d12a6faf30a6e93e8fb40a30e510","sha256":"aac08f1184a63c279fe38212ee2b0ef88801fa80aa410a31f999e9661823ee4e","sha512":"b84b3354a75dacf85f48cab77c2cd0ba67890b9bd5b040fdc1bcc932fb7bef1e7f760dd76a44ff8362e13af5ab97a60d11a0534669315a8fedd097223e8b5b3c","ssdeep":"3072:xGhL/F3i9/muGKx91E++jMXHTrtowJMCd5jNcRFeGhoJ:CBvKqxMXHTrayMCd5mfC","tlshash":"c21412182296d1feeb0ccbbb23056e5603cbd35154a907fe509f4e29caa31ad64f9067","first_seen":"2025-11-19T02:08:37.62503Z","last_seen":"2025-12-03T12:26:52.13814Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1433,"timings":{"blocked":89,"dns":40,"connect":5,"send":0,"wait":495,"receive":735,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202510/14/105020g8pw5f9lj4dj5lmm.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202510/14/105020g8pw5f9lj4dj5lmm.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68079\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 14 Oct 2025 02:50:20 GMT\r\netag: \"109ef-6411571d3e543\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FugM7mVlAD1WLNLLQBuPfgRi6r0f%2BISDFU%2BBjmWrhA1ovfYxdemzwT3oGp%2Fj3PYYbGtu5ItqeI9u4RaD0snbu%2FAVQ2mPJLWOa1ZO1aV%2Fw60%3D\"}]}\r\ncf-ray: 9a4fe470881532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68079,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1080x836, components 3","md5":"a27285308a27f5b85aa080028f6649c2","sha1":"efb67436a0bccb5dd6ae9eda3c12b4b8b7389f84","sha256":"5ed75b1957a354f0b838cdb4cf13d82d97e16c4d1fe3256551af5970ae083be7","sha512":"27d508dfc4fc32947f933aab8073e05a7bac16b723d5f44d84d728bb4353b43f51e4e84c2e078a78daa41d37106d63ef9893fbb26d6e5a4fb5caec7878832a93","ssdeep":"1536:t3iJd+IgWe9SoWrkmUzC5E87yS2rOO7VJEvyI7QK0aQ3DEy1dpJcq/t:9LImS/UzC5E8P2rOOHoKDEyuE","tlshash":"3063022da43fb40e828cc9fade7bd382d855cb161f48698d3b6214a39403fc6d55b64a","first_seen":"2025-11-19T02:08:37.606894Z","last_seen":"2025-12-03T12:26:52.134215Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1290,"timings":{"blocked":91,"dns":42,"connect":5,"send":0,"wait":544,"receive":534,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jackroad.co.jp/img/benefit/9/148393_im.jpg","fqdn":"www.jackroad.co.jp","domain":"jackroad.co.jp","tld":"co.jp"},"ip":{"addr":"65.9.46.77","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jackroad.co.jp","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 14 Oct 2025 07:23:32 GMT","end":"Sun, 15 Nov 2026 07:23:31 GMT"},"fingerprint":{"sha1":"E1:70:A1:33:7B:E8:FD:39:45:25:B1:DD:60:13:35:3F:2E:CC:22:DE","sha256":"23:D0:9D:9D:1C:E7:61:13:11:E8:D9:13:F6:DF:5C:AD:F2:27:B4:CE:66:C1:42:74:B1:2D:75:45:2A:12:A9:B9"}}},"request":{"raw":"GET /img/benefit/9/148393_im.jpg HTTP/1.1\r\nHost: www.jackroad.co.jp\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 236636\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncache-control: max-age=86400\r\nlast-modified: Wed, 26 Nov 2025 14:28:39 GMT\r\naccept-ranges: bytes\r\netag: \"1764167319-39ead\"\r\nserver: \r\nreferrer-policy: no-referrer-when-downgrade\r\nx-lightfile-proxy: webp-hit\r\nvary: Accept\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 249277a1d1cacc74019eda739a89f4ae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: Chi23eS58sezJnKCBOrjMda5AvfRxRSzeamkEjHzO3UlH1-2BtoaqA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":236636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x2000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"236835d424473b7392572836b87e095b","sha1":"ef4806455f9c3ed992acd4ddaeb5ee1e3f362a5a","sha256":"2d02399e795c8b6d04d56da364c28c67dce6dea83859c7b72ffc73c075b4ba86","sha512":"fdab136f318379fa4a3efe73bc228b04c884fd96a67ccdffa32e5f4a4c9e564dd230a9e5c8bd4f29f4af59c705a2b51295939b23693412f4512eec87b91ceae2","ssdeep":"6144:TU5dK2hgEV7357R8QKCLqLikqkEhxyFkV4kDI5iR:adKE7757/0ikWhxyKG8+k","tlshash":"803422e74573c1be1f826b313fa75f8f0ae40a5aa843b1be09f9ad011541229656fd8c","first_seen":"2025-11-25T12:54:20.902858Z","last_seen":"2025-12-03T12:26:52.135687Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1570,"timings":{"blocked":-1,"dns":98,"connect":11,"send":0,"wait":502,"receive":908,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/favicon.ico","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:35.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/12/16/\r\nCookie: __vtins__KKcdvi8eGnNALXJb=%7B%22sid%22%3A%20%221556375c-a905-5187-ac19-fe77433b255b%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201764230134888%2C%20%22ct%22%3A%201764228334888%7D; __51uvsct__KKcdvi8eGnNALXJb=1; __51vcke__KKcdvi8eGnNALXJb=2bd787e5-0c34-55d8-bea9-be03ee8055ab; __51vuft__KKcdvi8eGnNALXJb=1764228334895\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-redirect-by: WordPress\r\nlocation: https://hoshiwatch.top/wp-includes/images/w-logo-blue-white-bg.png\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JAvNewGA6VExdsZW2UsuzFajqKUE5mosD%2BL6EhgMWjcq6YMqhW2Lk6u%2FCxOt2jqSyZOJYh2Bci74oH0TbBYzZYafs3czcm4AmeVabQ%3D%3D\"}]}\r\ncf-ray: 9a4fe47aeebcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-includes/images/w-logo-blue-white-bg.png","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:36.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoshiwatch.top/2024/12/16/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __vtins__KKcdvi8eGnNALXJb=%7B%22sid%22%3A%20%221556375c-a905-5187-ac19-fe77433b255b%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201764230134888%2C%20%22ct%22%3A%201764228334888%7D; __51uvsct__KKcdvi8eGnNALXJb=1; __51vcke__KKcdvi8eGnNALXJb=2bd787e5-0c34-55d8-bea9-be03ee8055ab; __51vuft__KKcdvi8eGnNALXJb=1764228334895\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:36 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 29 Oct 2025 01:17:00 GMT\r\ncontent-length: 4119\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69016b0c-1017\"\r\nexpires: Sat, 27 Dec 2025 07:25:36 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjnssqom8q2OXdpKscI1sjYgs1aGIOEfKWUaH6%2FutMqH8qv2TCE8OTjlCj49%2B1GtroObgHPUpCZq36MOReAaW8yVQz1J0sbV50OdHg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a4fe47d1ed2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"000bf649cc8f6bf27cfb04d1bcdcd3c7","sha1":"d73d2f6d74ec6cdcbae07955592962e77d8ae814","sha256":"6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0","sha512":"73d2ea5ffc572c1ae73f37f8f0ff25e945afee8e077b6ee42ce969e575cdc2d8444f90848ea1cb4d1c9ee4bd725aee2b4576afc25f17d7295a90e1cbfe6edfd5","ssdeep":"96:h3bdWfcmTY+aRF1pXWZL2+42HGhIUc8KeLEd:hgXTY+as02mOB8XLEd","tlshash":"00814b63df38c566e66a2b189ff6bca56b290fd50ca1194c0eecb025632c06d1065089","first_seen":"2023-04-08T12:31:37Z","last_seen":"2026-04-27T16:17:41.666771Z","times_seen":58722,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/style.css?ver=1764228333","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/style.css?ver=1764228333 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/12/16/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 03:40:44 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69018cbc-3034d\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NC8OVlDbSvjt6qA%2BrMfcBJIBQ4CDcF5M82k69Q8JyS4ggXtJ8DOUjdx52W7xBrb%2BbLAaWu20OSe%2BZq9j7pYdc8p9wdtCjcQaG9SQsQ%3D%3D\"}]}\r\ncf-ray: 9a4fe46fae77b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197453,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (427)","md5":"fced29da5662c662107cc54a25ab90ed","sha1":"9f042de567afed8d340cc775b48fc106d06e049f","sha256":"ec165cb371bff6c34389d0cf15e90210b6c0fc11e7070d9c67c5c61b59a855f7","sha512":"72c1c733f3ed8a71c900209d70a07d05bdc407ed347366fad5aaf0f922ba3b8e7ced9a12c5f6023ae87436c3cdd81bd8b87207b4338f7a66d4b29d921eaf7faf","ssdeep":"6144:ibyKrTkHOFJs62zL2FsAO3O8/Olrt+jwZ2tJ0/6t+OTQOOVgfsd2xe8s5RZwdbXC:ibyKrTkHOFJs62zL2FsAO3O8/Olrt+j4","tlshash":"ad143f60a6b31c95611fd1582faab750732982c3d50fcdb8bf9976588fc43a0d5b2f88","first_seen":"2025-11-17T08:30:12.533263Z","last_seen":"2025-12-03T18:18:06.422635Z","times_seen":38,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/css/icon.min.css","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/css/icon.min.css HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/12/16/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Oct 2025 03:41:08 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69018cd4-68bc\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGKa02YbJzZnwuXFif9DDOcPCG7IRA3DMtLwWaf%2BjhAZnimfv7381nqf8c84tFWcP1bpyDWbzloOo1UoNqo7x5kNDIMXm7GmyXahNA%3D%3D\"}]}\r\ncf-ray: 9a4fe46fbe78b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26812,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c64f22433a90f38add2c8aac0a223fa0","sha1":"7a04de6ee1f5ab7c8a185274343c67c8f8c5c675","sha256":"f0669d5570d0890ed5c77e48fc9c182390ec9d022b775986e6c74a74e76fbe56","sha512":"90da6c10162ec245008d98293f396ba36f9f7247c719886980cdb574c2b99defb06c99d7971bcbabf26834c24a1f473c6ecce42c98142a93651b10477bd21b0c","ssdeep":"192:fyHGO2p/IAKtwmklVK7BQhnOGaoM7Pz4Mo8Q+8hk199JlbRKCUcL:Y2hIjm1lVK7OhnOGaoM7Pz4Mour9oChL","tlshash":"24c29db4dc2e01911722d9e193472512ef15b276ee426d5ef293ea8c9bf632484c2fdc","first_seen":"2025-11-13T01:15:04.23896Z","last_seen":"2025-12-08T10:38:20.86681Z","times_seen":234,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/lazy.min.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/js/lazy.min.js HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/12/16/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Dec 2024 08:41:08 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"675015a4-1ed1\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFoOtslN27RiIjOolhcZ8AWCaH14kp8CUQRQ16L8vZa9SiRjvytMfKftxjhZCKwaM8wcHzWkhYsFWkaXgU%2FFmfjVPgOLr5QIkxwYTg%3D%3D\"}]}\r\ncf-ray: 9a4fe46fbe7ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"96201abb62283557a9d7b97b4cab14ab","sha1":"a72f33d920d0ab863df4cb60edf44ec140304cdb","sha256":"46112dbceed738f759d03f04b115d5256a7d73660b7795acb382192ad84d9f98","sha512":"26b2f5c174744de4e87ab925e933c351af75df64b73c1d5478da594479827ba4f14b8dcf14951c1185218c96ff8badeb49dfae46fa7395c18eb6f0bfac341c0e","ssdeep":"192:dIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:d2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"16f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","first_seen":"2023-03-07T01:24:12Z","last_seen":"2026-04-27T13:12:51.174827Z","times_seen":5163,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202410/18/152730mozj5ymkv71gjvc1.jpg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202410/18/152730mozj5ymkv71gjvc1.jpg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 199907\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 18 Oct 2024 07:27:30 GMT\r\netag: \"30ce3-624bb3c55bc80\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0A28JXvfk2S%2BP40%2B5Jo7em6W%2F7%2BGf2XaesvR%2BYcDhGwCcxIl2Mq%2BFx9dH9TmR4kQK%2FLasbRXO%2FdF7rnQ%2Bz6Sub4%2FuMuAE3asxsMU%2BAaDpY%3D\"}]}\r\ncf-ray: 9a4fe4707fdc32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"4ad21a7f8be9f9b6ea1fe492279cc7f5","sha1":"eb89184e58351641703f128af1dcf5bff38ca745","sha256":"3120750b0f0f4c07c764d2fce138bf06da379265fbe38dfe562ce1f82a263007","sha512":"0b407a8878097ae40867e8286c28638043907104bf62e3b8b31d78e7d7605d37ab24f99af9b0433f216d7ee8e7c8cc8691c7f8fafadeda2b0ed0e09d4cad3469","ssdeep":"3072:4DFxkOUXS4ytk7SRXZ9YvDFHHQYf9OTbEY2sSH9zcsRprmgXFyOtXpc:4DFwXSRkGRXHgJHHQ/sY2s8VcsP7fvc","tlshash":"ee14129b4d5b91258e13c3b502fa25ab93009782be55930cfccb7d81f41936af13be96","first_seen":"2025-11-19T02:08:37.605797Z","last_seen":"2025-12-03T12:26:52.129014Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1410,"timings":{"blocked":84,"dns":41,"connect":5,"send":0,"wait":490,"receive":725,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fashion-press.net/img/news/93253/AS_FW22_Denim_Personalisation_2-3_PRESS_11.jpg","fqdn":"www.fashion-press.net","domain":"fashion-press.net","tld":"net"},"ip":{"addr":"153.126.241.87","port":443,"asn":7684,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fashion-press.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 16 May 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:89:F2:A0:98:2F:70:5A:9C:76:71:D8:16:75:2B:D0:4D:8E:EA:8F","sha256":"4E:9C:6B:47:E8:A6:ED:3C:3E:8E:A9:F3:76:58:8A:9A:E7:19:79:12:EB:E6:97:E7:DE:B1:17:C0:B3:DE:7A:70"}}},"request":{"raw":"GET /img/news/93253/AS_FW22_Denim_Personalisation_2-3_PRESS_11.jpg HTTP/1.1\r\nHost: www.fashion-press.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Thu, 27 Nov 2025 07:25:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":1841,"timings":{"blocked":-1,"dns":576,"connect":316,"send":0,"wait":303,"receive":0,"ssl":645},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/fonts/icomoon.ttf?cyzug3","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/fonts/icomoon.ttf?cyzug3 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/wp-content/themes/swell/assets/css/icon.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:35 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 15 Oct 2025 01:04:52 GMT\r\ncontent-length: 105372\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68eef334-19b9c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlqkVSzVh9FLbCITJAcMZ%2FELtjVP7qYyGhYfHMjxHBwWbTtr2V7ZUh017kFFJEO7KCjPIGPBCGy64FmKlITaLjxamrG2pUlkkzYHEQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9a4fe474ce9ab51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105372,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"2b8d53acf62f8fa4191c09369a6e665d","sha1":"4cbb780d80663a55132dfa2079334c3125dc0bf7","sha256":"77c0b6ba36b62072af6e27681d431fbd6a6f5fcfe4e8fd79371964bc13f96d68","sha512":"6114288c7c6329b37a32e40238601fb338a3328f5a4e313d71151ab0312b158902218dbc09b3e9c381d70c6f737055601289273b076ce44d92020a80be428c82","ssdeep":"3072:OdlHH/Zt+I0t5Y1eDhLkgHlbHjHlByGFJB4yIHqoRAiCQ2FoDd8VbA5iZzB9PQk8:elHH/Zt+Pt5Y1eDhLkgBHjHlByGFJB42","tlshash":"2ba33c4bdb5ecbbffc22c7780dab40241deaca25933ed29e99441d86f4148f84c29795","first_seen":"2023-04-27T14:56:28Z","last_seen":"2026-04-26T16:42:38.892125Z","times_seen":506,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 412\r\nOrigin: https://hoshiwatch.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://hoshiwatch.top\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\neo-log-uuid: 4368372934198299279\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/wp-content/themes/swell/assets/js/jquery.js","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /wp-content/themes/swell/assets/js/jquery.js HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/2024/12/16/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Jul 2025 08:30:18 GMT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6881ef1a-17a69\"\r\nexpires: Thu, 27 Nov 2025 19:25:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9zDf%2FG%2BtwmuoV8QjT0OLHEzkMg2EkK6l%2B8fF55PWCv8b%2FjBo3iljT28m8UUpObTUVpm0lsQT7xRxCIrjaWpYImn6z24%2Fpflj2vVEg%3D%3D\"}]}\r\ncf-ray: 9a4fe46fbe79b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96873,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"49edccea2e7ba985cadc9ba0531cbed1","sha1":"f8747f8ee704d9af31d0950015e01d3f9635b070","sha256":"1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df","sha512":"f766df685b673657bdf57551354c149be2024385102854d2ca351e976684bb88361eae848f11f714e6e5973c061440831ea6f5be995b89fd5bd2d4559a0dc4a6","ssdeep":"1536:HYE1fGBiByJsbfXXeRJ/shgWCeLLccJdZVHk04ssx+/mvaSIFSet43tpXJIGVyp3:fsAg0psxTva/FSeKy2bDD5a98Hrq","tlshash":"f893e8d9b2d6715287b734a850bf410bb17a98dab80c4c60f058d8e47e78e9d607bf2d","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-04-27T16:20:25.849445Z","times_seen":19870,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/Nix6oVSfS1E/maxresdefault.jpg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.86","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:42 GMT","end":"Mon, 19 Jan 2026 08:33:41 GMT"},"fingerprint":{"sha1":"A5:AF:4B:FA:75:93:1D:71:E3:13:0F:54:62:E3:C1:CD:54:FA:BB:3C","sha256":"BD:B3:95:9F:5C:41:DD:AB:ED:97:A5:A6:69:97:2C:11:29:D4:2C:22:07:36:93:DD:C7:20:46:DD:57:97:1A:E5"}}},"request":{"raw":"GET /vi/Nix6oVSfS1E/maxresdefault.jpg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 125679\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\nexpires: Thu, 27 Nov 2025 09:25:34 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1669625882\"\r\ncontent-type: image/jpeg\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":125679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"d85b45fdf9495cb390849348b2b374b4","sha1":"456757b9fa494bb98d50cd1e4a4bbcd325bb0580","sha256":"52dc3eda1402970e1bcee20da071105c856078e25ece8b402be8827fca767736","sha512":"cce4d6094684763311b2f0315cce44e870dd72a5424c38787ee287c8a3b0bbc9d0a84d41f0a0cb3cc8bbbe8b6852b47084d924172213c38d881c46d8684e715b","ssdeep":"3072:b7YmzboCV0vlfU3nL1cvg4RQAj36eFRM3Iy8C0fUUzUxg:b7YvtwcvS63dRnC08UzU+","tlshash":"09c3e0daf86414da4f3e9eb108c2a04bc51592b5ef93fc2d2e56ad94e246f0dc34734a","first_seen":"2025-11-23T03:45:15.283037Z","last_seen":"2025-12-03T12:26:52.131888Z","times_seen":9,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":33,"connect":26,"send":0,"wait":27,"receive":37,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images.buyma.com/product-images/tatiana/fashion/accessories/hair-accessory/230109/0090766411/511766052/428/tatiana-fashion-accessories-hair-accessory.jpg","fqdn":"cdn-images.buyma.com","domain":"buyma.com","tld":"com"},"ip":{"addr":"151.101.66.132","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buyma.com","organization":"Enigmo Inc."},"issuer":{"commonName":"Cybertrust Japan SureServer CA G4","organization":"Cybertrust Japan Co., Ltd."},"validity":{"start":"Mon, 21 Apr 2025 08:18:24 GMT","end":"Wed, 20 May 2026 14:59:00 GMT"},"fingerprint":{"sha1":"66:7F:43:FA:66:FC:70:C5:7D:EA:A7:FB:E4:ED:B7:B6:E5:3E:1C:68","sha256":"43:F5:1A:83:22:66:1A:D8:0B:D3:5B:2D:12:D1:AE:18:4B:99:4F:EE:2B:9D:DC:BA:33:09:62:37:96:AE:3E:DC"}}},"request":{"raw":"GET /product-images/tatiana/fashion/accessories/hair-accessory/230109/0090766411/511766052/428/tatiana-fashion-accessories-hair-accessory.jpg HTTP/1.1\r\nHost: cdn-images.buyma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: eFPR2nWtOs9pEmx2IeNS7CDL3O9/lD+fvOBZRYA1ZiSmADMEem3+XH+ExPavnuzSU6Wqrs1VTIp8B2ITQRWBS8rYwVko8RAQ\r\nx-amz-request-id: HKSPMXXR44F0G3B2\r\nlast-modified: Mon, 09 Jan 2023 08:15:13 GMT\r\netag: \"a52eec920e376e983020ba27adde8620\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=604800\r\ncontent-type: image/jpeg\r\nserver: AmazonS3\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 839520\r\ndate: Thu, 27 Nov 2025 07:25:35 GMT\r\nx-served-by: cache-tyo11955-TYO, cache-hel1410027-HEL\r\nx-cache: HIT, MISS\r\nx-cache-hits: 38, 0\r\nx-timer: S1764228334.183305,VS0,VE860\r\ncontent-length: 34394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":34394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 428x428, components 3","md5":"a52eec920e376e983020ba27adde8620","sha1":"0886e420f86680bb1c94f02e72f159a2613339b0","sha256":"eb5a10ab75968b909948594f2eb08a1308b2928bde10ceeec8eaa7addb50591b","sha512":"d190bc7b440d7f901ef2052e79a3ec78b3335c4bd1ca2a0c2acc584518051fc3db729310b220ea0df6d059a00d267b834f5fb04f1327c466892eb133ad424891","ssdeep":"768:H1HiJ3O0ayNDOVLtSpFrmMQyCFpIZzxgC4uv/nWIZ/+GuCuDDDDDDDDDDDT:VG3ODzSpVvDRfWIZ/rux","tlshash":"9ef2e13c222f97ca9e4bdbb6c467156561aff0bc2f941c0c506beb4921968d0708d5f3","first_seen":"2025-11-23T13:05:50.704588Z","last_seen":"2025-11-27T13:50:05.311469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":53,"connect":19,"send":0,"wait":874,"receive":7,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.fashion-press.net/img/news/90740/hUI.jpg","fqdn":"www.fashion-press.net","domain":"fashion-press.net","tld":"net"},"ip":{"addr":"153.126.241.87","port":443,"asn":7684,"as":"SAKURA Internet Inc.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fashion-press.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 16 May 2025 00:00:00 GMT","end":"Fri, 22 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BE:89:F2:A0:98:2F:70:5A:9C:76:71:D8:16:75:2B:D0:4D:8E:EA:8F","sha256":"4E:9C:6B:47:E8:A6:ED:3C:3E:8E:A9:F3:76:58:8A:9A:E7:19:79:12:EB:E6:97:E7:DE:B1:17:C0:B3:DE:7A:70"}}},"request":{"raw":"GET /img/news/90740/hUI.jpg HTTP/1.1\r\nHost: www.fashion-press.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Thu, 27 Nov 2025 07:25:35 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":1790,"timings":{"blocked":-1,"dns":570,"connect":303,"send":0,"wait":304,"receive":0,"ssl":612},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/2024/12/16","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-27T07:25:32.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /2024/12/16 HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 27 Nov 2025 07:25:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://hoshiwatch.top/2024/12/16/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v05uQQeVSUyNILHVdqUChe90TcI7eQatjGHdVwhDqgCo%2FeAvDqSUdaEbL3PPNAlEApM%2FduNvgVb8smIysSS6oY4TEh5Aci004DeRIPrT\"}]}\r\nx-redirect-by: WordPress\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9a4fe467bca54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54515,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-27T16:20:16.31082Z","times_seen":14285728,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":42,"dns":17,"connect":1,"send":0,"wait":554,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hoshiwatch.top/2024/12/16/","fqdn":"hoshiwatch.top","domain":"hoshiwatch.top","tld":"top"},"ip":{"addr":"172.67.200.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-27T07:25:33.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoshiwatch.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Oct 2025 08:06:29 GMT","end":"Thu, 15 Jan 2026 09:06:25 GMT"},"fingerprint":{"sha1":"93:3A:A1:8C:DC:11:A3:27:41:FB:71:83:D0:F9:0D:57:D6:BC:3B:17","sha256":"98:86:18:37:DE:DC:4B:DC:87:C4:BA:98:0C:CF:24:B4:C0:68:4E:42:AA:5F:AA:19:84:02:1C:1E:4F:AE:7A:07"}}},"request":{"raw":"GET /2024/12/16/ HTTP/1.1\r\nHost: hoshiwatch.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5KT4MmtMW6zIcLWp%2FBSOOlavy9bCoYLA36%2BW8bRvdxyFoMGi8T05aygtDf4BvZoPWOhV8ADj7HPZLa9tj%2Fx0e9dzW3D8KzWXtk3CFBU\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a4fe46b3d884c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54515,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"8aa734b9a6d7811c9d5f3e7f5a38b53c","sha1":"81c042e53c09b36f79fe45680080da8768a3551d","sha256":"ed139e2cde78d798e232200f56ae13c654d2a12f614158f626aeef48394f1ded","sha512":"45c1a89da5b555e6247e94b9aaaa8508eafe6ec14d1048b4cc4b7d8e71c3da1766f97ec03fff565de1bcdde22411e30edee461f1bd94784215f24935ac040ce9","ssdeep":"768:TqZdapzZ9Y1e0z30jcyjaVhDWObVE/clCnoMqQ0Lp:TSap38ijg3on0Lp","tlshash":"5233827e73d6202b6f27e2e995453328a08b49aec9f11e0278fdd5146b90fde251307e","first_seen":"2025-11-27T07:26:01.474452Z","last_seen":"2025-11-27T07:26:01.474452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-27","alert":"Sinkholed","trigger":"hoshiwatch.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cdnthumb.com/data/attachment/dzz/202411/14/173054vn6dfndfdfjow5id.jpeg","fqdn":"www.cdnthumb.com","domain":"cdnthumb.com","tld":"com"},"ip":{"addr":"172.67.152.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoshiwatch.top/2024/12/16/","date":"2025-11-27T07:25:34.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnthumb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 01:48:30 GMT","end":"Thu, 01 Jan 2026 02:46:43 GMT"},"fingerprint":{"sha1":"0E:1E:36:92:CE:84:47:29:04:26:12:F3:DA:D3:51:23:87:B1:56:8E","sha256":"E4:68:96:EB:07:86:77:A0:89:5C:27:73:3E:AD:85:91:FE:33:0C:5F:BF:1B:DF:CB:73:B4:84:B6:47:47:65:B7"}}},"request":{"raw":"GET /data/attachment/dzz/202411/14/173054vn6dfndfdfjow5id.jpeg HTTP/1.1\r\nHost: www.cdnthumb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoshiwatch.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Nov 2025 07:25:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9326\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 14 Nov 2024 09:30:54 GMT\r\netag: \"246e-626dc1b5cef80\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayjnZGP1xXvazQ6bHG2BLCy6EfQjY%2FKw5UUknB2r%2BXWz5%2FAaEIQhuYD7HPuFDL3WrDk6wX7mQsnSfFKnn3uFaJ3N8gnlYVJKy2VPWiqjwtA%3D\"}]}\r\ncf-ray: 9a4fe470780d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 60\", baseline, precision 8, 320x320, components 3","md5":"0a090575998deee0f43ff77b68506db3","sha1":"3d46f7e749be7f29f4436869667ee3932d1f3fdb","sha256":"074417c6343a1614f2d2b8a0f6b98a9c00e5ab482ae4ae64f2029a6a52095956","sha512":"7b7024ba6b7e6bd36cd4b2b6c88984c62c12d5ff4214b8998a6a0e0225c74b3d32d7ad3e341459dee4c3045d41b5cd84b9b35289e04099c3b2d430f3c9391533","ssdeep":"192:MOmiMfSkBM1iYf7FqysLNIEUx36vJqStdgZOFC6YtNgSLrH8iH9HynaR:h2fnPYzFqHLNpUB2N2cFC6YtNgw4KBHR","tlshash":"4512af231f85e3594672debd3912276bd553a0ce1ad0b12d8f375dc2ad70a5c9c2811b","first_seen":"2025-11-23T13:05:50.69992Z","last_seen":"2025-11-27T07:26:01.476179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":96,"dns":44,"connect":1,"send":0,"wait":489,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}