{"report_id":"2c6f1aba-ef31-43e7-9da1-12b3c3fc72f8","version":0,"status":"done","tags":[],"date":"2026-08-19T00:50:40Z","url":{"schema":"https","addr":"www.haiws.com/article_3341.html","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"www.haiws.com/article_3341.html","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"title":"2026最新imToken下载避坑指南：官方渠道vs高风险模拟版Top榜-imtoken官网钱包下载|以太坊和比特币通用钱包","dom":{"size":26068,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1959)","md5":"25dc51c43afdcb29cde65dfc70d2fa36","sha1":"dc44ebfd4014a446cb1e0d6b32d127f39ac4c656","sha256":"b9e92683303d53481f06e2d043556a458dd24705a5ec29fbc345a5f989446129","sha512":"36ff7abbc9577789dc711b7637e8fef661132b96e66fff6163f9440ef161bf04a21397adc964786a575fc1d571a31a1a78b0599772b8d3ff75e379ad27bb842d","ssdeep":"768:991t3z3SmpMuFj7ARLCRtZiYwGPaKe2vw78mIr:T1dz3l6uFj7ARLCRS9GPu2I78mIr","tlshash":"f7c2e86746caed2217115af076f4b72ca0435a19cab79fc0b8ae94f57f80fbe6503418","dom_hash":"domhash99483cbecbe28a3fc7ae73f59fbc2b39","first_seen":"2026-08-19T00:50:44.279191Z","last_seen":"2026-08-19T00:50:44.279191Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.haiws.com/article_3341.html","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T00:50:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.haiws.com","ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2009-12-03","domain_rank":0,"first_seen":"2026-08-19T00:50:41.536488Z","last_seen":"2026-08-19T00:50:41.536488Z","alert_count":34,"request_count":17,"received_data":405833,"sent_data":8738,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Prism","description":"Prism is an extensible syntax highlighter.","website":"https://prismjs.com","common_platform_enumeration":"","icon":"Prism.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","ip":{"addr":"23.225.61.100","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-05-07","domain_rank":0,"first_seen":"2026-05-11T02:15:44.533328Z","last_seen":"2026-06-29T18:43:11.856739Z","alert_count":1,"request_count":1,"received_data":21521,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"haiws.com","ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2009-12-03","domain_rank":0,"first_seen":"2026-06-07T01:54:02.239785Z","last_seen":"2026-06-07T01:54:02.239785Z","alert_count":2,"request_count":1,"received_data":129144,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.haiws.com/article_3341.html","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"domTimer","is_inline":false,"md5":"f58d30efd16fe00f20ec7cd72e3b9429","sha1":"cee1f6491121a294a7dd215925eae4cc6cd3bebc","sha256":"2847ca15cb844703210f70ee39aa267a68bd0f31fd020df1e7b36d44c1a413d1","sha512":"27bed5490fcadb702bbec92991f2d5766da4050c0f5dcd0b72e0b04b5cb1cdeaaeb76e96bcb366ca57c866b4879de153a6ba39e9f5742b8083fbc778a7470522","ssdeep":"","tlshash":"3cd0000ac80a00288030083a8200808003000f08c808020008008a0200000280020030","size":265,"data":"","first_seen":"2026-08-19T00:50:44.32352Z","last_seen":"2026-08-19T00:50:44.32352Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/article_3341.html","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e373ab5b656efbff6e06934c9ffeaf93","sha1":"8358eecaa468fc3669bc3fd54f70602e5c8da484","sha256":"17d2fb694cb7cbdcf12699199aa545c57438db0150679951d179552711b20791","sha512":"3ea7336598e09f26acef78f0d0714aca490c15e1aa290559aa3e736efa67294aa3d4accb5907ae54e356f21582eacad7714f2e12712999325f9faf066dc2ee9f","ssdeep":"","tlshash":"f11127aa9b4d412207bd03aeb83187ecb93cd14a661338459c5c6ee934a8ead6409de4","size":980,"data":"","first_seen":"2026-08-19T00:50:44.330787Z","last_seen":"2026-08-19T00:50:44.330787Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/plugin/UEditor/third-party/prism/prism.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"436e8870ba117885ef700bbeaf798ba6","sha1":"7b242c9b1698d8cf69310101c64535c442b97949","sha256":"5867cef615756cb75b523c11e29d88f770ddb40fd51bc39cd60e3ba86d004fdc","sha512":"bd5f55dcdeb34fa64f49cc8badbe57a68cf0b2aa9d2799e31e998a44018352ee8d2326800975c914eb951069bf7024e9197aefa08e1a16e0c038aae1bf8acd71","ssdeep":"768:m5Y2fNvMbzlD2nW6uY45AHdw7UECX3b1ivdpMOxkKda2U6PDFDnNLDSAkvZrE/Jk:IYKEvN2W6uY4EwV1l42vd3gZAccRRx78","tlshash":"de535cbc5eb73d010ac7e1a6f8a29500e9221975d929791bf7e8d648c0f390742d3b6f","size":61131,"data":"","first_seen":"2023-03-07T12:24:55Z","last_seen":"2026-08-19T00:50:44.318319Z","times_seen":2405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_system/script/c_html_js_add.php","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c4ed1eb822c7f3ff87bf007e2bfa5e5","sha1":"e615c4c8a8d385ea0520b75ab2dd307b6e7628f2","sha256":"8acd7c5db75da20be250eba4fc695b2af7e0a5bfb94c012881f535daf11925e2","sha512":"09a5d372ee4bc25c6eb89ebe38dfa792b128c483abf8bc980836f801c19af8b69978da3e8cac7d1af52eaec42f0b0e6911775b87c72576e104a2ff73a4394630","ssdeep":"96:6rQV06qZuiMRd1BhXJnbZ2THKrOeiMMKDg8E:6Evf1BhXJnNAHMiMNDLE","tlshash":"3391d748595a51a7243763b7d8af6604feb3166b8004cc26fe7c50642f71f84a163fbe","size":4515,"data":"","first_seen":"2026-08-19T00:50:44.291428Z","last_seen":"2026-08-19T00:50:44.291428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/script/sticky-sidebar.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"de6ef5bb52a87b70869462a71fbfb692","sha1":"363b5c18e38949fdce517311896b2fce3c7ab374","sha256":"c4ae1f4a75c230b5bfa2e67e84ba67425fec6b5bd241d3c8e0b0791f465f5ceb","sha512":"0857859d31659ab4e14d7372f09feeecee7a97c68fb6abbed8014fc6cb8752871ced48de882988481f92445300a07bad04f6a71700958f743ed6c1cbfdbd2844","ssdeep":"96:EjsJK38KAseYTUUnmgF787LvPcfo13AdM5rLbEn:cs03rAFYj6L3ci8MhLbEn","tlshash":"8ac1221b1f403531e596b8cfb1ff5836f52acc932fc5d039543c86aa4c1aa7480d7aaa","size":5725,"data":"","first_seen":"2026-01-25T18:38:42.937173Z","last_seen":"2026-08-19T00:50:44.29408Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_system/script/jquery-2.2.4.min.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85582,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-08-19T00:50:44.303355Z","times_seen":12894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc/im/a9xp1g.js","fqdn":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","domain":"mmxihzuxbbdgqvsyq5512d.cc","tld":"cc"},"ip":{"addr":"23.225.61.100","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7d8a9ac10f4b385beebfa837292f947","sha1":"231732ae609dc3d0b3960a63b85ad864fedff98c","sha256":"860b9c32087c130aee1a29aa57145fa2ac3dc66bc847066e30c3372f85ebd5c7","sha512":"12bc5c8ee6ab290d6c272cca700079bf4fae6be3f504ee32bcdadd2a62aa63c14b3bce8bd5c80637d63d488fee8d35d79f0612bb8344708443eed9bd9b4d6a13","ssdeep":"384:wFUJUU+KfhJfaxWeJepYtwRYUcGPj7wj9CnMOdbspvSRk00ZL/jfm8mVM5+d5:wFUJUU+KJJfaxWeJepYtwRYUcGPj7wj6","tlshash":"8892f259a3bfa80b9aaf4511dc3a2d5c94f61cf20b5df41e8e3b7288e724154ce93724","size":21035,"data":"","first_seen":"2026-08-19T00:50:44.297596Z","last_seen":"2026-08-19T00:50:44.297596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_system/script/zblogphp.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e8d86eb2c5abc94804fd6176a35b281","sha1":"921d2cc4615a58a094ddbcc6366437a94508fc5f","sha256":"11b10a45b9fc3622b9a8eaf5181e0bd403af74ecfbbc9541cdce396a8e47b332","sha512":"6504e48f68d98800228db18dc63711b216c299dad8d95e57d0f014c18a24a2ffbc62f6cfe98f5d0152d06da577efb550c20bc947c08101ea3c94d659f572ea17","ssdeep":"192:msL4JVH9jIULy46KgHlQGwH0Dx5qjplLO:m/jIUkHlQGwH0Kt9O","tlshash":"2fe1315cf5c476a103ab30b4088f028a64fb17ae6011d998d264e4e46fbdf8b5623f3c","size":7204,"data":"","first_seen":"2023-03-07T23:31:01Z","last_seen":"2026-08-19T00:50:44.314231Z","times_seen":2861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/script/nav.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c5717275475bc3164314bb08ae6ff7a","sha1":"b75a10dd73d096147788c189fd45198be8fc0e0d","sha256":"ecab9a8cc9e414e313f339517c1a46f76003c388643d7f258b86a23d8110aaf0","sha512":"1ad16ba9a9e70b0ed3d39b69bfac6087e341e2dba8f90095a52e69d43b1f23a7893f81f4a1cbb293672b2390deb4f795304358dd970042960f7ba8f97d4160e4","ssdeep":"","tlshash":"6d214d3af914039a417ea7f8ca3a1268e6b3042bb707cd00b4dc44553e1da685e51f6c","size":1315,"data":"","first_seen":"2026-01-25T18:38:42.940835Z","last_seen":"2026-08-19T00:50:44.284267Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/script/nav.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.616Z","timestamp":1787100611616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/script/nav.js HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a40644a-523\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1315,"size_decoded":833,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5c5717275475bc3164314bb08ae6ff7a","sha1":"b75a10dd73d096147788c189fd45198be8fc0e0d","sha256":"ecab9a8cc9e414e313f339517c1a46f76003c388643d7f258b86a23d8110aaf0","sha512":"1ad16ba9a9e70b0ed3d39b69bfac6087e341e2dba8f90095a52e69d43b1f23a7893f81f4a1cbb293672b2390deb4f795304358dd970042960f7ba8f97d4160e4","ssdeep":"","tlshash":"6d214d3af914039a417ea7f8ca3a1268e6b3042bb707cd00b4dc44553e1da685e51f6c","first_seen":"2026-01-25T18:38:42.940835Z","last_seen":"2026-08-19T00:50:44.284267Z","times_seen":14,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/images/logo.png","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.850Z","timestamp":1787100611850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/images/logo.png HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: image/png\r\netag: W/\"68c63797-11d5\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4565,"size_decoded":4813,"mime_type":"image/png","magic":"PNG image data, 130 x 45, 8-bit/color RGBA, non-interlaced","md5":"a5640ba2260966db32d2c65748fed513","sha1":"e17a840d8d070efa6edc1aa2999f1e9b9ec2469e","sha256":"8b422dc5baa79527e70d0592eb67b49e5a9028cdcfa3182dba4f220454426082","sha512":"2447eea45eb2d75c6ee13ebe7a75d18bc4487a056b7a8f57af909f3ac6539f0d070af2b9dd1e0817b592ebb9095f516b1b9c0b5db996bee71a32f68e2ba5e7ff","ssdeep":"96:ByS5qvVGKx8mAsG99hSfCGXM5jiIHBFTsnmF/X1nVAYzxT8jTL2kHgy3C:BEELNsG99hSfCh5jt8mb1l0TDC","tlshash":"c7917dc545606ff1c9d02e7b5017bff93e6280957c1a0ce2cdaa19aec68c78c97606e1","first_seen":"2026-01-21T18:02:00.961732Z","last_seen":"2026-08-19T00:50:44.28818Z","times_seen":14,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_system/script/c_html_js_add.php","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.614Z","timestamp":1787100611614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_system/script/c_html_js_add.php HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nproduct: Z-BlogPHP 1.7.5\r\netag: W/6c4ed1eb822c7f3ff87bf007e2bfa5e5\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000;includeSubDomains; preload\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Prism","description":"Prism is an extensible syntax highlighter.","website":"https://prismjs.com","common_platform_enumeration":"","icon":"Prism.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4515,"size_decoded":2165,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1260), with CRLF line terminators","md5":"6c4ed1eb822c7f3ff87bf007e2bfa5e5","sha1":"e615c4c8a8d385ea0520b75ab2dd307b6e7628f2","sha256":"8acd7c5db75da20be250eba4fc695b2af7e0a5bfb94c012881f535daf11925e2","sha512":"09a5d372ee4bc25c6eb89ebe38dfa792b128c483abf8bc980836f801c19af8b69978da3e8cac7d1af52eaec42f0b0e6911775b87c72576e104a2ff73a4394630","ssdeep":"96:6rQV06qZuiMRd1BhXJnbZ2THKrOeiMMKDg8E:6Evf1BhXJnNAHMiMNDLE","tlshash":"3391d748595a51a7243763b7d8af6604feb3166b8004cc26fe7c50642f71f84a163fbe","first_seen":"2026-08-19T00:50:44.291428Z","last_seen":"2026-08-19T00:50:44.291428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/script/sticky-sidebar.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.843Z","timestamp":1787100611843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/script/sticky-sidebar.js HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a40644a-165d\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5725,"size_decoded":2136,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5725), with no line terminators","md5":"de6ef5bb52a87b70869462a71fbfb692","sha1":"363b5c18e38949fdce517311896b2fce3c7ab374","sha256":"c4ae1f4a75c230b5bfa2e67e84ba67425fec6b5bd241d3c8e0b0791f465f5ceb","sha512":"0857859d31659ab4e14d7372f09feeecee7a97c68fb6abbed8014fc6cb8752871ced48de882988481f92445300a07bad04f6a71700958f743ed6c1cbfdbd2844","ssdeep":"96:EjsJK38KAseYTUUnmgF787LvPcfo13AdM5rLbEn:cs03rAFYj6L3ci8MhLbEn","tlshash":"8ac1221b1f403531e596b8cfb1ff5836f52acc932fc5d039543c86aa4c1aa7480d7aaa","first_seen":"2026-01-25T18:38:42.937173Z","last_seen":"2026-08-19T00:50:44.29408Z","times_seen":14,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc/im/a9xp1g.js","fqdn":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","domain":"mmxihzuxbbdgqvsyq5512d.cc","tld":"cc"},"ip":{"addr":"23.225.61.100","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.845Z","timestamp":1787100611845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 20:07:43 GMT","end":"Sun, 15 Nov 2026 20:07:42 GMT"},"fingerprint":{"sha1":"61:B8:0D:0C:58:25:9C:53:CD:3B:6A:7D:D8:B2:C2:3C:65:88:3A:41","sha256":"80:31:86:61:E4:A5:65:15:22:8B:DA:0D:BF:15:D3:CA:9E:7F:1B:C9:CA:95:BB:45:EF:E7:7F:7C:1E:B8:96:08"}}},"request":{"raw":"GET /im/a9xp1g.js HTTP/1.1\r\nHost: sodmsizn.mmxihzuxbbdgqvsyq5512d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Tengine\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Aug 2026 05:27:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a83ed4b-522b\"\r\nset-cookie: server_session_469cbe74=e3e6a0c19a7cea0e5201f9236fd88bcc; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nexpires: Wed, 19 Aug 2026 12:50:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_469cbe74","value":"e3e6a0c19a7cea0e5201f9236fd88bcc","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_469cbe74=e3e6a0c19a7cea0e5201f9236fd88bcc; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21035,"size_decoded":4609,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21035), with no line terminators","md5":"c7d8a9ac10f4b385beebfa837292f947","sha1":"231732ae609dc3d0b3960a63b85ad864fedff98c","sha256":"860b9c32087c130aee1a29aa57145fa2ac3dc66bc847066e30c3372f85ebd5c7","sha512":"12bc5c8ee6ab290d6c272cca700079bf4fae6be3f504ee32bcdadd2a62aa63c14b3bce8bd5c80637d63d488fee8d35d79f0612bb8344708443eed9bd9b4d6a13","ssdeep":"384:wFUJUU+KfhJfaxWeJepYtwRYUcGPj7wj9CnMOdbspvSRk00ZL/jfm8mVM5+d5:wFUJUU+KJJfaxWeJepYtwRYUcGPj7wj6","tlshash":"8892f259a3bfa80b9aaf4511dc3a2d5c94f61cf20b5df41e8e3b7288e724154ce93724","first_seen":"2026-08-19T00:50:44.297596Z","last_seen":"2026-08-19T00:50:44.297596Z","times_seen":1,"resource_available":true,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":91,"connect":206,"send":0,"wait":206,"receive":0,"ssl":415},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"sodmsizn.mmxihzuxbbdgqvsyq5512d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"haiws.com/zb_users/upload/2025/12/20251222160206176639052684866.jpg","fqdn":"haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.854Z","timestamp":1787100611854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/upload/2025/12/20251222160206176639052684866.jpg HTTP/1.1\r\nHost: haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: image/jpeg\r\netag: W/\"6948fafd-1f773\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85188\r\nx-served-by: haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128883,"size_decoded":127299,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, description={\"AIGC\": {\"Label\": \"1\", \"ContentProducer\": \"zhipu-maas\", \"ProduceID\": \"2025062805463789473a37eb334a27\", \"ContentPropagator\": \"z], baseline, precision 8, 1344x768, components 3","md5":"5e1801602714194519a1512db1fbbf33","sha1":"f808245350f74757c994396f2a456f63d4f551ec","sha256":"746aa1e9620af9e7433ecd01dfe56bbaf7091b0e00bf423aeac63f68ebbb7c51","sha512":"5beec18dd5dd8142fac86ea2c1c9e77ba8e0ffcf43a383bae406dbe0b88d8e804cf118be5d35501f335b05a37fe151e581cfc5d7effadf74425824d734a99b78","ssdeep":"3072:vZ5lqdh9zb2evTX0UvF/vE+rZw0pnXXPKny4qnBOTSU6ja1k9nGN:Ja9ziugUdXE6Peeja1wGN","tlshash":"2ec3125bf1533497ef1ce174d886416be9226d2c31204df63c79a96b0271ef282ab2d7","first_seen":"2026-08-19T00:50:44.300296Z","last_seen":"2026-08-19T00:50:44.300296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1087,"timings":{"blocked":-1,"dns":876,"connect":207,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/fontawesome/css/font-awesome.min.css","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.609Z","timestamp":1787100611609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/fontawesome/css/font-awesome.min.css HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: text/css\r\netag: W/\"6a40644a-7918\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":8069,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-19T02:45:53.389486Z","times_seen":309815,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_system/script/jquery-2.2.4.min.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.611Z","timestamp":1787100611611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_system/script/jquery-2.2.4.min.js HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"61554fb2-14e4e\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85582,"size_decoded":33865,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-08-19T00:50:44.303355Z","times_seen":12894,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/script/.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.618Z","timestamp":1787100611618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/script/.js HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nproduct: Z-BlogPHP 1.7.5\r\nx-xss-protection: 1; mode=block\r\nupgrade-insecure-requests: 1\r\ncontent-encoding: gzip\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":29681,"size_decoded":7980,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1528), with CRLF, CR, LF line terminators","md5":"b35abcd53111f7b7596d7f36643470fc","sha1":"1fc4e5cd480929d720c37419e4cef365ac9ca0df","sha256":"bb80be9c2fe26dfb88777ad8780800d6f06717d8f62aed4f1b24b94f0aee8310","sha512":"724d69c400086e3fd2ddd95f9faaa463bf4497336094a7b0f62e3e64b98c1a2c7eb0defa66550802242be175b9cf4397ce12ffa7ef3f8821ceea29ebd4ea1728","ssdeep":"384:yJdP+EpsFBaV/tBpQ6PaKWbfVI28p2xUKiSiDXmp2:yJdWlBaVXDPaK462xw7DXmp2","tlshash":"88d2669643caec371b1288fda5e4b769e4436819da934bc1b8ef557b2b80f7e7403409","first_seen":"2026-08-19T00:50:44.304267Z","last_seen":"2026-08-19T00:50:44.304267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/upload/2025/09/202509141757821354685344.png","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.853Z","timestamp":1787100611853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/upload/2025/09/202509141757821354685344.png HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: image/png\r\netag: W/\"68c639aa-4b9d\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85188\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19357,"size_decoded":19648,"mime_type":"image/png","magic":"PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced","md5":"f36b80023cded5c46739c808aef85a5a","sha1":"b8637dce827415891983c3966b55a6f0febeec10","sha256":"bf46829dbd9e00b265b5f57807d071836f27f40eff7a3c3ef6ed2ade63d3c447","sha512":"b08303a2f4e0f52f1016b89cccea29c776e6842bedb1c9a5fec9240dc7fd1b961a3904c9dbd8f22c43b8b5cd931e9ca55315c2c677de22092dc684d896fc86f4","ssdeep":"384:ZwaL3py2bv77L4CP5ttmIfIwIUK0TH24KbHNBOy3SRJfwD:Zwij0aJGwIU7TH2tbH7OLR1M","tlshash":"b992e04827b3fed4a8259c78a2f36228bede335601e0aa784995d4701730de3110e6e7","first_seen":"2026-06-05T04:19:24.473658Z","last_seen":"2026-08-19T00:50:44.307252Z","times_seen":4,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/images/btn_top.gif","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:12.376Z","timestamp":1787100612376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/images/btn_top.gif HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: image/gif\r\netag: W/\"6a40644a-6ca\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85188\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1738,"size_decoded":1684,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 57","md5":"56de700a9ca36aa858fc25ea1b8ea5b8","sha1":"65b4bcd76b791849544aa0e9e34ebb9a3c4d59d1","sha256":"927024e8aba263373d90759117b7b52ff170508c273e0142c6b7d4da43111e1e","sha512":"476146b1c4fdc572d61d6302265955e1e073c78dd617f0373c6825ac2b4c842ab25e3364956fbfd1e9d618ad2be106a001d526d58848a3ed1d2a3075c662e94f","ssdeep":"","tlshash":"c231f80efda5e8c0c60ceafd19f6d9735e578840e5f0e989348cd42759a80754a1cb97","first_seen":"2025-12-02T12:07:04.064875Z","last_seen":"2026-08-19T00:50:44.309237Z","times_seen":14,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:12.422Z","timestamp":1787100612422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/zb_users/theme/zblog5_wz/fontawesome/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\netag: \"6a40644a-12d68\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncache-control: max-age=85188\r\nx-served-by: www.haiws.com\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":77444,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-19T02:45:02.714985Z","times_seen":532915,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/images/favicon.ico","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:12.886Z","timestamp":1787100612886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/images/favicon.ico HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nCookie: timezone=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:13 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 12228\r\netag: \"6a40644a-2fc4\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncache-control: max-age=85187\r\nx-served-by: www.haiws.com\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12228,"size_decoded":12513,"mime_type":"image/x-icon","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"a1780d996b1ab91b425c23602eb699e5","sha1":"afc2fc664d3f22707e92a4b39be0267f3eec120c","sha256":"a2cc33002ab87bd1ee614f6ce35943bb3465e0fb360f59fe8bc59fdefcbfe82c","sha512":"efc1c9e142d4c47c62222fe11f7e701caaac79439c49bd97b5f99c05ba27dfc7c2628ef1a86c0573697f62bbef986d98104225d2a0e65cd528a4f2528033e3d8","ssdeep":"192:Qf8BMG5au94Yzy8JsCOUHo6ZjWLHL9Yged9eqt9uVDm1d/9Z0AoD8UIqJCV:QfA8u94Sy8lRHbiHL9xe/aD29LoHJCV","tlshash":"4c42d0509e366a4b5c897f10058f70139d468191bcf6ccfbd18669f324b029db68cdd6","first_seen":"2026-01-25T18:38:42.933713Z","last_seen":"2026-08-19T00:50:44.312226Z","times_seen":9,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_system/script/zblogphp.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.613Z","timestamp":1787100611613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_system/script/zblogphp.js HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: application/javascript\r\netag: W/\"61554fb2-1c24\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7204,"size_decoded":2808,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7204), with no line terminators","md5":"5e8d86eb2c5abc94804fd6176a35b281","sha1":"921d2cc4615a58a094ddbcc6366437a94508fc5f","sha256":"11b10a45b9fc3622b9a8eaf5181e0bd403af74ecfbbc9541cdce396a8e47b332","sha512":"6504e48f68d98800228db18dc63711b216c299dad8d95e57d0f014c18a24a2ffbc62f6cfe98f5d0152d06da577efb550c20bc947c08101ea3c94d659f572ea17","ssdeep":"192:msL4JVH9jIULy46KgHlQGwH0Dx5qjplLO:m/jIUkHlQGwH0Kt9O","tlshash":"2fe1315cf5c476a103ab30b4088f028a64fb17ae6011d998d264e4e46fbdf8b5623f3c","first_seen":"2023-03-07T23:31:01Z","last_seen":"2026-08-19T00:50:44.314231Z","times_seen":2861,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/plugin/UEditor/third-party/prism/prism.css","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:12.069Z","timestamp":1787100612069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/plugin/UEditor/third-party/prism/prism.css HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: text/css\r\netag: W/\"64ade32a-1039\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85188\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4153,"size_decoded":1775,"mime_type":"text/css","magic":"ASCII text, with very long lines (446), with CRLF line terminators","md5":"b723c2f958f530879d534e05628b401a","sha1":"2a7ba0076d94322373e6033e8e7d414c77b11592","sha256":"e82e0b58f5c11f55f08603ea35e2aa7612d4e5986e5cb6bc2d4c53e3c1c9c149","sha512":"f5537e2e51c8e8c210a639646fad3230e2180e5c5ad2597115b24d1253e73981469a2d3155e28b8ba38e77776fc6933a2ba45d0e9f00fd5876d7264f7d6e46fb","ssdeep":"96:FJpT8IVUVLK5oSXX1V1VIHvtVtVQnVAf5rVKHVlVaBkBABvBUBQBBOB9BlBWBnBb:B8dLK5oSXXzzIHvLLQVy5xK1DiQcpgQ5","tlshash":"958110219d7b159d30076a67e8f1b0243816aa19c993267cbf30d2909f43fdeebb3519","first_seen":"2023-04-08T15:33:58Z","last_seen":"2026-08-19T00:50:44.315029Z","times_seen":2318,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/images/quota.jpg","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:12.381Z","timestamp":1787100612381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/images/quota.jpg HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/zb_users/theme/zblog5_wz/style/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 182\r\netag: \"6a40644a-b6\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncache-control: max-age=85188\r\nx-served-by: www.haiws.com\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":182,"size_decoded":461,"mime_type":"image/jpeg","magic":"GIF image data, version 89a, 31 x 27","md5":"80aaceacbbf415ecb1ad1f9f8313663b","sha1":"408e9d98bf7daf03f3040db7ecd080adf0c26329","sha256":"6e0254edec7baab6f11158619ef29c2e858a5d950eba04d066ff1dee7b060cf0","sha512":"7920bbdf9e75a28f17cf22b348a56a189c9909ed42283a3aa9e3dd8ba76fcea99f2b3b2ace7d67b9168b219440e7c00dc69c7e9fd8ca3d226c5dd49691a65517","ssdeep":"","tlshash":"24c0c0005dc4990ac850d43b48cff148003073cc55840129885371cc8304f38607040b","first_seen":"2026-02-11T23:13:48.675772Z","last_seen":"2026-08-19T00:50:44.315811Z","times_seen":5,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/plugin/UEditor/third-party/prism/prism.js","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:12.067Z","timestamp":1787100612067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/plugin/UEditor/third-party/prism/prism.js HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:12 GMT\r\ncontent-type: application/javascript\r\netag: W/\"64ade32a-eecb\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85188\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61131,"size_decoded":25311,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4799), with CRLF line terminators","md5":"436e8870ba117885ef700bbeaf798ba6","sha1":"7b242c9b1698d8cf69310101c64535c442b97949","sha256":"5867cef615756cb75b523c11e29d88f770ddb40fd51bc39cd60e3ba86d004fdc","sha512":"bd5f55dcdeb34fa64f49cc8badbe57a68cf0b2aa9d2799e31e998a44018352ee8d2326800975c914eb951069bf7024e9197aefa08e1a16e0c038aae1bf8acd71","ssdeep":"768:m5Y2fNvMbzlD2nW6uY45AHdw7UECX3b1ivdpMOxkKda2U6PDFDnNLDSAkvZrE/Jk:IYKEvN2W6uY4EwV1l42vd3gZAccRRx78","tlshash":"de535cbc5eb73d010ac7e1a6f8a29500e9221975d929791bf7e8d648c0f390742d3b6f","first_seen":"2023-03-07T12:24:55Z","last_seen":"2026-08-19T00:50:44.318319Z","times_seen":2405,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/article_3341.html","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T00:50:08.917Z","timestamp":1787100608917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /article_3341.html HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nproduct: Z-BlogPHP 1.7.5\r\nx-xss-protection: 1; mode=block\r\nupgrade-insecure-requests: 1\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000;includeSubDomains; preload\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":25860,"size_decoded":8689,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1869), with CRLF, CR, LF line terminators","md5":"7152282f41cf309a1a4936bc95eed5ae","sha1":"d86611ca9135ac8c1519c312642c1e9621b28d2b","sha256":"dbbcdcd558cbec529f6d4786b563eeabae372f4c0cc863b41b15b5d086ee9321","sha512":"0141ee264ecd451926ccd47e022d3f2ac4449d3afe336fe7c4698705edb6fe5ac19f5b082ae465c10c647c03f0e68e9b5a0b423786ee33f3ac6f9b7f1eb4a4e2","ssdeep":"768:udM012pMGFj7gRQCjL3xpPaKh2xw7DXmpK:j0126GFj7gRQCjz/Px2W7DXmpK","tlshash":"49b2f72746caec2117215af476f4b72ca0435919cab7aec0b8ae94f33f40fbe6507419","first_seen":"2026-08-19T00:50:44.319194Z","last_seen":"2026-08-19T00:50:44.319194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2469,"timings":{"blocked":-1,"dns":744,"connect":210,"send":0,"wait":1081,"receive":0,"ssl":433},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.haiws.com/zb_users/theme/zblog5_wz/style/style.css","fqdn":"www.haiws.com","domain":"haiws.com","tld":"com"},"ip":{"addr":"91.110.250.228","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.haiws.com/article_3341.html","date":"2026-08-19T00:50:11.610Z","timestamp":1787100611610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haiws.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 00:55:58 GMT","end":"Sat, 03 Oct 2026 00:55:57 GMT"},"fingerprint":{"sha1":"4F:93:98:C3:BE:E5:17:88:E4:95:DD:81:02:D1:41:7A:6E:7A:C6:90","sha256":"2E:4A:4E:A8:E4:EE:F3:1C:64:EB:95:63:E6:20:0B:A0:F9:71:DD:B4:1B:84:CC:05:6B:F9:85:C4:93:12:E8:47"}}},"request":{"raw":"GET /zb_users/theme/zblog5_wz/style/style.css HTTP/1.1\r\nHost: www.haiws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.haiws.com/article_3341.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Wed, 19 Aug 2026 00:50:11 GMT\r\ncontent-type: text/css\r\netag: W/\"6a40644a-737d\"\r\nexpires: Thu, 20 Aug 2026 00:30:00 GMT\r\ncontent-encoding: gzip\r\ncache-control: max-age=85189\r\nx-served-by: www.haiws.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29565,"size_decoded":8037,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, CR line terminators","md5":"62ba51d02d25db486aea5c775f2698db","sha1":"991d99a23892e9cbfe3b246fe22a76b309fc3136","sha256":"2f44f78ad67d62791a02decabe5826a1b494375dfa02a5060758a5e0e5a9c54a","sha512":"1617e4451efc789a64ddc1cbbd0ffbad7e274e47611c6fc795629e73dbbe08b27e4728b8458788029bcb636f7e95f853bbccf78613d993907930bf08cfa415b3","ssdeep":"192:zWbNM/RZy8SaLI2lJXb8lZfnv64om5eOpS7Qno85CnZe+f1m235FndDh3Bj3C9df:WoqNm7ndFBLQQOi/JUSmVgQOQ1fb","tlshash":"66d22f5cda024046b337d6b9afb25746eb5a005397020ab8bfec72108fba5bd5561fcc","first_seen":"2026-01-25T18:38:42.930411Z","last_seen":"2026-08-19T00:50:44.321246Z","times_seen":8,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"www.haiws.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"www.haiws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}