{"report_id":"2f4f04e4-7a06-4c36-a8b7-4949b033d24f","version":6,"status":"done","tags":[],"date":"2025-10-30T00:57:52Z","url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"tkmallalliancen004.shop/#/index","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"title":"TikTok shop","dom":{"size":173040,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43081)","md5":"289accba0356e857ccbb7058d2a8f3e4","sha1":"c7da5ede237d6e24323b4af7c61e86e71903676a","sha256":"896cb1e7ea8e7e666cf08089febf6eae1bce6f4f63301c92aa117f80a2757f88","sha512":"f666d55677b36eea4512557b75ab5e25dafe0a312e328a70950468baaac7fd67c010e80bba583e333f2ba301e171f8270c48d5be248e6b3cf1b43870c4be0a46","ssdeep":"1536:U/C+9a3KxeIeMMzVIxpOMZMiO/7/NEWwEePkgi9iwqe1lbMk7ZI+KozXC/kuw3RW:L+9abfMYVCFOiYNEWLkFp6cIOWIb","tlshash":"430452b1ca6a223b42274dd870705b4fb6e3c31dde974a0167fc97895febc94ea04489","dom_hash":"domhash91d02d13fd6d033d4c24a6e1e9a02dab","first_seen":"2025-10-30T00:58:20.003371Z","last_seen":"2025-10-30T00:58:20.003371Z","times_seen":1,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-04T00:57:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mall-test.s3.amazonaws.com","ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2024-08-11T22:28:16Z","last_seen":"2025-10-28T03:54:41.3829Z","alert_count":0,"request_count":63,"received_data":6095759,"sent_data":28719,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"tkmallalliancen004.shop","ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-30T00:57:58.695264Z","last_seen":"2025-10-30T00:57:58.695264Z","alert_count":238,"request_count":120,"received_data":11391471,"sent_data":60249,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imgtest1.s3.amazonaws.com","ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2019-08-25T08:51:32Z","last_seen":"2025-10-28T03:54:41.302833Z","alert_count":0,"request_count":34,"received_data":2925042,"sent_data":15506,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"shoptkmallallianceo.s3.amazonaws.com","ip":{"addr":"3.5.17.120","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-04-29T11:36:01.195322Z","last_seen":"2025-10-29T21:07:08.200194Z","alert_count":0,"request_count":3,"received_data":974633,"sent_data":1401,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-131c3a80.ba20e2b4.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2c9493dccc525d419164b9960d631a4","sha1":"b9d45f8e976c712426beba7696cfebd08808f89c","sha256":"3603c30392d4c1b63e65fe10870b4f887fff467db7f0312dc63f5de01771dfed","sha512":"833fff2751a04ce2f66e268d47b94190195bdc49d1af3a8ab540c841cb88a3b01adbfa0072e966212db97540c8c5b34be76e5cba3281f8494b155319db88569b","ssdeep":"192:+ZCje9tFJsHRpVuXmWKD1LtygXI/DSpFMOOr05xq/cictjAfNeNF/BPsGC4:1e7FJsHRpCQJRX+2pDXmmvPJ","tlshash":"245295e6c470a4bd495a81726045e1e0fb653a6cd102514efb7cec9a72ed428333e77e","size":13671,"data":"","first_seen":"2025-04-05T11:30:40.547479Z","last_seen":"2025-10-30T00:58:20.063263Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-1fd26ca8.80a05a7c.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3185407bbd1a529c29c8306fdaa07cd","sha1":"5e1852d222858b6f445c4bc7717a4a7df488fe8e","sha256":"3afe56b6e880cd73f8b7a5b31bbfe8a348ef76b6835048c91aaadfe78e807d77","sha512":"e1f577601a88d2073bf23e0172a0615d5205f3aa343a9d4d0a85db2db91b27dfd8f6a90cda5632dc54b163cb3a0688c4e5e05a7c3315f5712a9e704dd1fc9e3e","ssdeep":"384:6osnVXOdCkZXaMsS0UBlDKalA4NMrh+/QeOYHWvzdfP:KedLsSdBlDCU/eYI","tlshash":"f4c22a47a4d1ac7d8b977259341f1294e6762f85d442cc96b63cd8f4e2bba30231b72c","size":25874,"data":"","first_seen":"2024-07-24T00:38:16Z","last_seen":"2025-12-14T13:51:49.25656Z","times_seen":545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/js/chunk-vendors.b004e3e4.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"628dfe7ab1a5036679ab2398c11b9999","sha1":"77aa405c8a799247567da3de0eba26765d3ae512","sha256":"45da21c6f663b570f561764ef821847b07483925c7bc7f8774bc4edc23bbb053","sha512":"923d04751ac9157c74cff46741ea139507252136bba559d6908fb27aa43e263becde131f7f9be397538d9666e5aaf0bef95e293c84ca5f5fc3042851ee4a2407","ssdeep":"12288:/LNtOagLQIg4fWYjc4CfAXT9CW6BDpHIqRGz8hd6f/C84Twj6rxO4dWpVo2D:zfOdfWYjQgT9CW6PVRGz8hiaTFU","tlshash":"6895a4182a5bf3849549c0d7f93b3c84d6aad18aa00b24d15f7187f31bb1786ebadd13","size":1888416,"data":"","first_seen":"2024-09-25T10:54:53Z","last_seen":"2025-12-14T13:51:49.294798Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/js/app.1bdf2149.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c4e9cf93b60e3810b01fb2f1274cde3","sha1":"f31e6dee1162d59efdb68ef28c487bff95edf990","sha256":"20597bec426353067db38f4635f2427d318be6c26678287e50ca5425115a95d0","sha512":"4d40ce3301ff90b456942d9993e983ee9ec1dda076dde7ecabbf750b4958d583461c5637abb06a1fa8e07a942ddfbd52aa7acbff7016a02c7859e6915dd82d2f","ssdeep":"49152:1Bi3GOK9zm0/uXE9P/ogct2cMcjMEpEcXYnPMrSryF93L4n+/8Vwmb5LdOVV8ZxL:EK9zz/uXE9P/ogct2cMcjMyEcXYnErTm","tlshash":"84756dbe17da77f805480742805b79382aa81e7bfba6f4e004f6f65912d8bc5c123d76","size":1643802,"data":"","first_seen":"2025-04-09T10:23:20.300306Z","last_seen":"2025-10-30T00:58:20.138777Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/vendors~app.e68c9730.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6510b7d09aac765ef82ceb7e64b9a90","sha1":"cc16a02be14e3bbc9c33c90ec80659d99ab5aef5","sha256":"e5955e28aa8d1e86d2bd50f5f8e986cd26203b12936823cd1deb8497c68f059d","sha512":"475bbf460023fdf98abe1ee1a1b178d3eafb6da5c57340172dc796558abe5073861bf4e8f57c7c53961fe69f03b16184c75771c9b750ebd5cab2b8b472ad78a8","ssdeep":"49152:wYLFNhhNKhiIdnrkBGbJUV/8RaWU4nCNXdwKDhWBpZ8Ket+1VEQxv:BLv/4EBGFUVPWvAX+Kgpj2+M4v","tlshash":"b7f5c35c365af340915ad0e7e43b3c49d26ae189a40b00d07f7187f31eb574ae7aee26","size":3556889,"data":"","first_seen":"2024-05-04T04:46:03Z","last_seen":"2026-07-19T16:24:13.467181Z","times_seen":2624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/app.bca3f2bb.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb08e96d52234be715d3e4cc5602bd5f","sha1":"eb548b80b2fb93f240c18f13d943cf350db0b09f","sha256":"37693d9db2c3a20195977baa40ce03a73ffd811615c3020e525d683b4e8c2378","sha512":"0d4f8abb7a454e773db11bd71ad166b6b0b260132217036bd0d2db9a020fc8778b6ada1d7d6b1c984293563eeff9284aa008e3e64d7a953c873ac84008add46c","ssdeep":"24576:ktN3RgOb3hHsMU9TePlGtLzT9HxfUZO23ZkxKdQ+4n69cEdswB9LRbWxQ7BAi9Xs:KN3RgOb3hHsMU9iPAtD9H9aTpFW+AXeS","tlshash":"e0558dee67da77fc0c585646a04f3975219c1cbafb95f4e008ecfa1921e9e408213f69","size":1374378,"data":"","first_seen":"2025-04-01T11:12:06.979562Z","last_seen":"2025-10-30T00:58:20.140398Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/50277ee1-dc11-4e3b-948e-f2f37f4858da.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/50277ee1-dc11-4e3b-948e-f2f37f4858da.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: DY/CWnQm20pdglaXacvS4CsafcBdBSupp9bnKIzSkyNR58HQ0vPMYcawbatk+NdtlhxJsGP4ucOcPdGqmgmZs3n6GcWqI5f8nzpRMmiDi/Q=\r\nx-amz-request-id: VYRKEC9RPGGBHRQG\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:21 GMT\r\nETag: \"cf0c2ebda19a43267a2348c11f0e9b1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 104771\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":104771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1166, components 3","md5":"cf0c2ebda19a43267a2348c11f0e9b1a","sha1":"f530278c1954d58bd91d7fd632ec98745670d158","sha256":"f38fad678825212dd76b489f41c44d65f661ffa87f0391f2a1f12823ffa01adb","sha512":"d22c73c72f3979b6d42c25bf33b4dc242900c7923bf2a5fffe6eb262a1c94ec32958594df688404505b92ae99ee8213518bdf76f2a6b4b63c96515899aa48014","ssdeep":"1536:4hPJiIGQfVd8Vw5LuDqpota4IsA1zT05E/igYy8aiPVymyKvgLgwwdmFwXlqfMKi:4hPpVWiLuDqIAkzy8aiPVy0vQ4R","tlshash":"c3a301c3611e5ca3c9381877233286328fb7e7c7c15da49cb458aa29c1e97bd3db9095","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.813697Z","times_seen":7034,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":736,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/right5.1ea7fcc6.jpeg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/right5.1ea7fcc6.jpeg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"5524-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5524,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"1ea7fcc6e9b3100bffbe6b7f028ff17f","sha1":"61c58566bbc59e3f7eee8fd0ca827c00da52a17c","sha256":"a3b706331a70ffa493547d558a58857bfa2dcbe54f11b19745a8c0ec4692e045","sha512":"7c129d8b0f97c5c3645a966ea129cf352e53997c2caeb88d975a6774bb157808dec36999b766942663622fce8ce7ea387d4a2a5f4385cb68481e554b4dee4d05","ssdeep":"96:WhJUFeNHgld/rdM2oX1pfs1BBfcVq3CxmaiVFMbo9qJC1dwH2J34Rm1cum8lwoRY:E5NH+BqBl1kBBfc1xmnQ7U1dwH64AyuA","tlshash":"d6b17e19e62eb807cb2aadfb2d5c259661011ab47f1c0bf245b121ddbd42cb1af15314","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-08-14T05:10:09.642139Z","times_seen":4713,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-813bed94.13b4950a.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-813bed94.13b4950a.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"21063-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21005), with no line terminators","md5":"652b1d786690f55de8acf65f8b10eefb","sha1":"5eaa4cc7bf9fe75b746e7e7fe008332be508e583","sha256":"44a0c9c19c34b462937d0d350d16af785b64717955ee9ca149a879958d63feb8","sha512":"eba368d4c16e13699ee29d1bc5cafcf97d52c65daca2e7aed0d5578b2af4bdba36b0d5498dbad40a1643ccd9b818cbe95e0d42a8adaf7963f05e88eea6eac6da","ssdeep":"384:zPSsASXLk8moDXbyuJzIXXs3iX775b/2MnnAbk7wK6EY:v7kXoD3Jordb/2MnAbk7wKc","tlshash":"5392ea86e072a8ac895b6250351eb3b4b6752b94a040d459fa3cddbc21e9d64333ff7c","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-11-08T09:49:22.144073Z","times_seen":363,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/right3.9c862538.jpeg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/right3.9c862538.jpeg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"5499-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"9c86253815081c0c34036ff07d755cb5","sha1":"c76c8077affbb0a17ef370150dfb718db290a455","sha256":"29f7b8a55109e9ad235762ef2edf7523357ac563202f2ef931aa3099685c9e8a","sha512":"cd0ee09be0e8c939646c3e72e32a70a37017bb27f5bf23e3167776e8aaf81c0ff3868ecc1eb12df37341088e1aeba54cc1605c88aaf44a89000a8eb5b53b65a5","ssdeep":"96:Wh4J1bDl2qrFHk8A3CrwfOIngvJlMde582vqxe2CjEploBUs3:ESxPFHk8A39QhDQVoBX","tlshash":"04b18e9fb6cb7d90f776043be0c61d5522d67b0615e0a7fc8098aa4f98bbc714d10879","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-14T05:10:09.645549Z","times_seen":4714,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-b4023030.9d6fd9b9.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-b4023030.9d6fd9b9.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6183-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6183), with no line terminators","md5":"cf2d58ef98592ae1791a1cfab81379f6","sha1":"fda9d9e496ee3e9c4419ba5cb0bf108f63e97487","sha256":"31c40d76499de8d4462194465f4e8a0ced91bd99a701ce034d488eb400fab847","sha512":"2b678f7f03a299ba7f5678faee0693433ab00c0ddcc220a8c76d77cd53fa82f3b106c965b743c0768e91de5b5f41a33d2f8c22d6e196e4de80b80ad2c228e98d","ssdeep":"96:V735Bnp0eZAhzD/wFmwxM3Q7BkyJCFoJUx9Bfiea2dFyq:Vzaw+7Bfiea2dFR","tlshash":"58d141132a676564fcbae01e7a647b8e3e4cf643d08606bcf99a7e35c4c7873b518141","first_seen":"2025-04-07T23:04:12.898416Z","last_seen":"2025-10-30T00:58:20.006829Z","times_seen":91,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-5a8a56f2.b0c8f691.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-5a8a56f2.b0c8f691.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"14397-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14397,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14397), with no line terminators","md5":"14691ceeb48450b9deacc55862d81372","sha1":"87f61c6cf28e110223c3062292df58bc6410bee0","sha256":"af535bd43a506cb79406b477c4868f9e47de192f5730043fad9832130cae9291","sha512":"30838593a2ecb115817c3042ae58101b0704a17f595a1e136bdaef588f7ae50688907be4a4b8002f9959d69ffa07bdc6e86041114489bdedfdcf4b16678f458a","ssdeep":"192:LgCjS3wrDOR/LfNFaTfNF4v/sODCMSXc6HqgCI9pn5VsseeyVj+4ceRs:5YpLfNcTfNWXsAKXjk8XeD5+4cee","tlshash":"9452e74f70bdedb8899a6052301a22b971351bd0f0054cd8b7bccde84489ea8a32f77d","first_seen":"2024-07-24T00:38:18Z","last_seen":"2025-11-08T09:49:22.234652Z","times_seen":527,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/02a275d6-f6e2-4a03-863b-4f4a8e5553a2.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-07/02a275d6-f6e2-4a03-863b-4f4a8e5553a2.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Qcxe/Vbgr1vdx4UfBnPzznznsZJEZV7MjSL3XUUgcQbBt+zABfFbUT52TC0xQHSRNGkpMSLgNgSMpAR96zfU+yDFkLCfqngf\r\nx-amz-request-id: HC793HKGXCBD7FP0\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:45:35 GMT\r\nETag: \"5a1dff9153a77d8a9378efd305a31020\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 224131\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":224131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1220x1500, components 3","md5":"5a1dff9153a77d8a9378efd305a31020","sha1":"b280f6a2970151e339afd5e73361e0c6a734744e","sha256":"8ee4ccfa0296fd6e5c7ca878aa83aa308acc4699ede63a1cabc0be5af3798602","sha512":"abeb0d6350b6e478258e33713708899eff0b9a58db05b3137d5f869ae78214493b0829a025a3d5ffee54038c62d08ff38f0ae26a011960c0e5a08ed2ebd2e24e","ssdeep":"3072:/Oktuw2ZB4RVrrrV2GlegkDtLvyrA+PmwLiixr10oAIC1yQFMQLNXNP7g+UB2qDa:mktT2TCOGeLvIf/2IUyKb62qnGj","tlshash":"bc2412a0e302057ac0fd497d1cca4627eeaef7ba61eef102c42768103957736b574a67","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.83174Z","times_seen":7476,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/b8a68172-576a-4457-b9aa-10c98bb46782.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2UbG4ARpdOluAxZRD4H4IZgfHHS9mnRrO9rP5WSBJs3xpKGxquIfEAqIVwuLCgYBRGb2KhbkapvmwE/7gBAFIi+KPyRSrTvxJ6Nmgs2falg=\r\nx-amz-request-id: HC77Y8VGWVR6R6HG\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:09 GMT\r\nETag: \"963cb56e987f75139a4206e2853821e6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 234396\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":234396,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"963cb56e987f75139a4206e2853821e6","sha1":"ce71e1769f7261cd7b9a24961ad20fb7a59020af","sha256":"ca1da66523d750de307c04335a1c1c6a4a5984b6e18740d6a9b5d05328a83eb3","sha512":"32b60068394c931060c1753e698783852cf5287a33a02520531964297d9f7c9b2a075a104400d58371a38b39e90f79349952df52f99ce456d4a43da248fba813","ssdeep":"6144:hEAd94lqhbTQUovlU065PNq7FHQpTmsx/:hpd94lEE/Nc5w7Fwt1","tlshash":"de3423f953a91d48d25c2b303153934d7ebd68f3ebe22b319440240b0efd590f55a5ba","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.061187Z","times_seen":2497,"resource_available":false,"data":null}},"time_used":1605,"timings":{"blocked":607,"dns":8,"connect":94,"send":0,"wait":124,"receive":287,"ssl":483},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/c568cc14-8506-4b6e-85dd-bfd46f7a8607.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 48PmjI9AkOvIH2U32apPsXq6vAjCY9cRvrLASozTd1mTu5lQztYtFTCrgTaw1uqpQ5SHjI8Ti8SjEohyLWQrgb1AJJlrT852Ctm6ZRGG0BE=\r\nx-amz-request-id: HC7DWDG8JE30TY0H\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:37 GMT\r\nETag: \"69ea9ab0655294c4e81cb9123f9b84ed\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117788\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":117788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"69ea9ab0655294c4e81cb9123f9b84ed","sha1":"249e0e3b9f9c8ebb9d3c2b0e8f96db0bbbb96233","sha256":"49bd15612e8028f820eea86b82dafa4d5e439225445e527cf5a3232ed060d942","sha512":"4e05f275f9d9ccecc1ff61aaf45278811f0062aced05aac2d3d4c7648c4be9e1130cda1ec819a3a4503006a7c49b87fe94e1bc71657c2ad2708080425857f71e","ssdeep":"1536:3edS0foEyCuEPL1TVLKPXCTmcgFbbLmWEDBygAcq5qtlDRVtU+e+aPZl6ejI9li5:zCAEP/ICIbCWEBHAcq5ylFVBIuNuV/lr","tlshash":"18b31204277e7cc1c2f9a176c8b1567a57b5c74ee2dd9714ab5a3401cfe3a202e10aab","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.098683Z","times_seen":2419,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":572,"dns":9,"connect":93,"send":0,"wait":120,"receive":191,"ssl":446},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0842PRXT6/61tbbK8RkHL._AC_SL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pc/gp/B0842PRXT6/61tbbK8RkHL._AC_SL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wnXs7A1Q6jCnIJHI0MsVatr0eRRyhE+FiGNR15TLwshPXsHDQXX7MhNtPv0LJfE84aVBS8qYP0keIW1U4oslCkxR5C8ZPuBmRiER9UNFtiI=\r\nx-amz-request-id: HC70W7DXM8Z0H994\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 02:59:56 GMT\r\nETag: \"63e2fd337fbf2929ce3fe246e90ba31a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 2fb50a8c3ba54fbd84dc3342532f989e76ca7540832b7c4931d8ca33db55213c\r\nx-amz-meta-s3b-last-modified: 20231026T124629Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 75594\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75594,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x687, components 3","md5":"63e2fd337fbf2929ce3fe246e90ba31a","sha1":"bf2750fce56ef9ad51e4a5d8a50abdc336c058c3","sha256":"2fb50a8c3ba54fbd84dc3342532f989e76ca7540832b7c4931d8ca33db55213c","sha512":"64a18a9024eba918294bf2bc6d7ba454fe08f1f1ce6dccf2b30f08dc6d2b0a81eb96f47bfbf99e0a74c50180b9c4b0ed4d657a38da176ba2106c81b49b808e01","ssdeep":"1536:Ub+La/D2TkPb7Jg4T9L9KLKTs2ZWvPA8UJIIZcbV2JUwgrDx1Gxz0:FW20Sgsys2YI87jMJUt1+o","tlshash":"867302b3fbb063b5d52498b121054e29bf939a38f8c09ab3a962873734e4ecc58c5595","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.054057Z","times_seen":2276,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":857,"dns":0,"connect":0,"send":0,"wait":120,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/js/chunk-vendors.b004e3e4.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkmallalliancen004.shop/wap/","date":"2025-10-30T00:57:22.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/js/chunk-vendors.b004e3e4.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkmallalliancen004.shop/wap/\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:22 GMT\r\ncontent-type: application/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\netag: W/\"1888416-1735151418000\"\r\nlast-modified: Wed, 25 Dec 2024 18:30:18 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1888416,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38851), with escape sequences","md5":"a8f7e2542a0e3094e594c25bfde71a76","sha1":"e591036d375c189558feedbc83c68c63f2d48443","sha256":"17ed1f8345f9940ef9161fde58112d96469f70ce3a0679d041be1218bb6b7003","sha512":"87fec658b0d3dce02353f2d03f6081b13022591b3654fec0f708d75d1513aaeedb213c27d8b5e060a775e479b60b1653b6c6eb2e5327ba56c1db12ea409ed7aa","ssdeep":"12288:/LNtOagLQIg4fWYjc4CfAXT9CW6BDpHIqRGz8hd6f/C84Twj6rxOu:zfOdfWYjQgT9CW6PVRGz8hiaTb","tlshash":"a4354acd32c6b4a247e321b1402f250af33a5a69680e8454f665e4e6bc78d6d437bf7c","first_seen":"2025-08-04T15:34:30.995038Z","last_seen":"2025-11-09T21:52:34.800485Z","times_seen":5,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/app.9673018c.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:25.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/app.9673018c.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"234708-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07733d0f40b549e3448b104777119a40","sha1":"821f81d4e221cdab8a6835215050fb6de7414b1b","sha256":"1adaa5e90c86a1457a8f84a3541f65eaa44585af22e5fc9fb2e284a14d7cbd2d","sha512":"e56b738940703d302b22c2796fe54fd57bbc700d6014a4ba6cb37319010a7f115eb7fbe279c768c548722fa05a2aa6a2742b9e3ff77d5a231e3f7f52f7196877","ssdeep":"1536:bgqId3828Y7SrW3YeWXA1u9w4HCe/l4RdgW9cMEcWAp7KO6iZkJgYu8e0r8kvXOd:wFFJWTPL4Q+05q2pe","tlshash":"e834b510db17217b222be66d75c0ba886f28c323d8725b7bfd95741ccae64891163e1f","first_seen":"2025-04-01T11:12:06.935046Z","last_seen":"2025-10-30T00:58:20.011492Z","times_seen":88,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a7691184c58deddb98232138112f8f5e","sha1":"3d4be17b879eb66a8de8153c4c5ef601ad5a74b6","sha256":"0bcedf93de6b35c9e18b4650500d11f98d4ff01c67c14d7cf4bced48562218e4","sha512":"a9cf3529325dda52b4c29d229bd08a2a8332042fef49f59c84c5ce07fecd67bf5ad66a74cedabd359a0a7ae12e304099fc08340c1d9b5463d64ce8d068c0199c","ssdeep":"","tlshash":"ccb01201188c1c360556248d3c2d3908a91f101308e46b3adf445a2040990e81004425","first_seen":"2025-09-15T01:41:36.797923Z","last_seen":"2025-10-30T00:58:20.012309Z","times_seen":20,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-04-14/fb09769f-95b0-4418-bc5a-8f91952ddf75.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ve6fD2WoEzYse+Q6SCiKOjoVywo981nNhqIMdLVeYdMXeJhg0VYZrMnDExRbV/FFUZDvlLVRmoUHJK+jCOAoPlfcPApvMIwu\r\nx-amz-request-id: 76CMF6E9TH2G8M8F\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"e1d0a17b2eb5865bccc7dff6330f6562\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 147078\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":147078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"e1d0a17b2eb5865bccc7dff6330f6562","sha1":"c956ae8ac7dc2720241d709e92d963ce814550bb","sha256":"9d0495f4e08deab21e64eb8cbe00de00a937aba37d3ff7a3714f30e551f978e0","sha512":"a6c80898e0109f3b6887861ca36e8bcbad9e7091a24eb9d49e55051ebeacbff242ecf0b192cf45d318948b90d660b97dc520cf870d5d651af386a4cec7553456","ssdeep":"3072:0bomG8J7r42I27eo7oPi6T3gKWN4+ogF1Ejq76Cui8MuXK/vDJMKC:0brr425eo6WUgRuC98M7DJMKC","tlshash":"f4e322ddc9c8a380c8003df5fd1699599a347ea34db476461f637adc7b19648ae1bc0c","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-08-18T19:52:02.210462Z","times_seen":9429,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":99,"send":0,"wait":130,"receive":190,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-91f4e7e8.054674a3.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-91f4e7e8.054674a3.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"4173-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4173), with no line terminators","md5":"d26838e6fc6c5713d841649b06a47e9c","sha1":"7681e0887d8b3957920c84e07fe95a1f8a22bca7","sha256":"5d0e36aa6715f146ee4979217b130ba8e86c334c02758895220835a2366d5a01","sha512":"d01fe57c48c7685b7f14f29a50d61418040c66ed4c756276c25108e74dde577d4c79841b9d3690f94799cb30a1ea691dba49e71870b97018d2d57291026f90d3","ssdeep":"48:jMxKHcoeYHjMBgquTy/ra6oYkAryBxzYpUfRmua+IzvtTm5rx2/6iYrxXfZsfZyK:CKHco56gNTwm+yNfZsfZyZZK+8p5","tlshash":"cd81ee91712c94266c73e07b309e455e6e54ef63c012a3589c56bf3e8c932e32e707c9","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-05T08:23:29.931375Z","times_seen":5300,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-83fd3762.3deffc00.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-83fd3762.3deffc00.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3423-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3423,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3423), with no line terminators","md5":"2b207373c31b539d731413b20e6816dd","sha1":"f905a0a4ecf04ed721c3240776eb3ee88bc275ff","sha256":"9cea95bb9e08566cbd5dc0cb1228aa2eef1f312d4710ab8498bfb3e8f4c10383","sha512":"a29a43519df3089fe8f8d8e68682eb4568e3d1018f1dee74bf00702db220eabfa5058286cb32e1eb05d4a2045f81e039d47814ca0f4068ef9ae405abe5a5bacb","ssdeep":"","tlshash":"1561640e5453b47eac6e5102b11975a8a0722fd6c841c4e7fa3ccea993d0d74332ebe9","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.490511Z","times_seen":2427,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/24d6b74e-f4eb-44d4-86fc-bba207f24d23.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/24d6b74e-f4eb-44d4-86fc-bba207f24d23.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: fe2BGh8HpxgdDiZ5AHTd16WHsUH5qTLp7L7q8S6QsKpmBnvk+IKMdI9fNMVDg3ROVVpKPTTuS+y4KL8nAY0Gx9fcemHTRxLhutBn4HOfcCs=\r\nx-amz-request-id: HC7C0GB8QBVN5VAW\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:46 GMT\r\nETag: \"9be647a74de795386541434285edbd8d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96163\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1125x1500, components 3","md5":"9be647a74de795386541434285edbd8d","sha1":"b503f1ec4dcbb115539579fff23d285ec01d8748","sha256":"6947267bc07c27d8485e3a3894124696aa1ba4508f3ceb62fb5f418b95a7fed8","sha512":"2582c3ee33760146f1361c15033d5de58eba750efc02284495aa1b16d07dbe871a87959c2fc5b85588ff2ad53625d22a622638185edbba7e080ae2fb8a97a91c","ssdeep":"1536:EtvRpIwrSu08Tz7lp0RRZhNrJCJbmvU6Vt+CgTVTdJFrqGssfQWkIfYEnDIzclFd:8vRUuhTflpyzCaU6vTgRTJKsQWkwhGct","tlshash":"439312914b80d763ee3d733669b9e7724edb5f260a35812a0f1c080c6dcf992e61e54e","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.869604Z","times_seen":7312,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":1051,"dns":0,"connect":0,"send":0,"wait":124,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shoptkmallallianceo.s3.amazonaws.com/type/2025-09-18/b8fd5818-dcb0-4c55-8bf2-1cf1d57b4fa7.png","fqdn":"shoptkmallallianceo.s3.amazonaws.com","domain":"shoptkmallallianceo.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.17.120","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2025-09-18/b8fd5818-dcb0-4c55-8bf2-1cf1d57b4fa7.png HTTP/1.1\r\nHost: shoptkmallallianceo.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HPNu71SPkdr6gIDWDOdEJ0HknQMx1PMvXtve+Cbn6H09H+fKups24UL6xjfglIQ++KK6bNx/9vx2xXi/kEhPVQ==\r\nx-amz-request-id: 76CTXKCZQRV62SKJ\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Thu, 18 Sep 2025 07:08:35 GMT\r\nETag: \"ef6bfd372baf2256f1b0137365b59768\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 347904\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":347904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 702 x 312, 8-bit/color RGBA, non-interlaced","md5":"ef6bfd372baf2256f1b0137365b59768","sha1":"f496421ce2e1430b20d60dc1f07185dfb3c0a497","sha256":"da5fdaf679672eae3fdc5a9d13677b567290e2fc444e15d0efc0dc0508c119c2","sha512":"8bfae08f975e46bc0c4f1154efa066b5533db150f8f6e9590b97b665265c0f8c81d6e99fca7b535e132fb23acaceb255717da676c3b9af3bc5bb9738bb662f8a","ssdeep":"6144:jRf4bdIgOO0DYgkE/DzGr3U9FOSept8V1YfEhucCI/xfG6RyWgNxQ/lO47:dsdILBUgkE/DzGrPLL8YIbCqGtW0yU47","tlshash":"2674231ef0d661320ae55ab7515692a3dd94abc053a6e98ec0f5ab7c562f230e0f0dc3","first_seen":"2025-09-30T03:54:30.339163Z","last_seen":"2026-05-30T03:35:54.798409Z","times_seen":56,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":276,"dns":25,"connect":96,"send":0,"wait":119,"receive":285,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shoptkmallallianceo.s3.amazonaws.com/type/2025-09-18/d6374694-e346-42da-acf8-448858573d89.png","fqdn":"shoptkmallallianceo.s3.amazonaws.com","domain":"shoptkmallallianceo.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.17.120","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2025-09-18/d6374694-e346-42da-acf8-448858573d89.png HTTP/1.1\r\nHost: shoptkmallallianceo.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: oo09Q/mo959bfj5NQZkMru4uuByJ74axTb+Ot8Fu60vCpTeMwHfhuhbniRV+IOmvAPRE92wi6DuCOF7m0yggKg==\r\nx-amz-request-id: 76CXNBV0GZRHT6VY\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Thu, 18 Sep 2025 07:09:27 GMT\r\nETag: \"07a8548851568f0ea9954e960171d6d2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 287318\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":287318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 702 x 312, 8-bit/color RGBA, non-interlaced","md5":"07a8548851568f0ea9954e960171d6d2","sha1":"c6d4c177381e256ada9dc41e9acad6533014b556","sha256":"a157a06d25d05f6db5662772dbed00240df6bace63acfb13a0d978caed3f5b35","sha512":"7f1c2ac95969b35eb04dbfac6a608089a97ebae7d79b0449b26f25c40ccc44331e6896b5109ea6be56b26336e17a8b89f1698ac4b22b8cd6f514bf9c317ebe05","ssdeep":"6144:eVJYXTGTaHH0HtOxqEFG/ss0BX5SMnJu0CPqEX/7AECX:0deUHtzaG/CpkMI0YX/I","tlshash":"d45423000597bab84c0e734915cf2957e283e6b8d972cf2e53eb8554ebf5413e361a2e","first_seen":"2025-09-30T03:54:30.248107Z","last_seen":"2026-05-30T03:35:54.795272Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":441,"dns":28,"connect":96,"send":0,"wait":124,"receive":291,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/97f3899d-51d4-4cd2-9720-0af99206dabb.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: C8bwstwXivoHAJYdlludvkKVC5MhEOcj2rI22fgkHUTc7Eb9mjHJJ0r+o7dTPeADizUlze5sdItVPisZccWo1PX1ATX9Dblm\r\nx-amz-request-id: 76CQQTQ56J8YB52J\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"74ce2539c3d1d018eb92f94dd3b9bd23\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 40407\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40407,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"74ce2539c3d1d018eb92f94dd3b9bd23","sha1":"1ed07808d60d8ff4965899591136f4f1ccc880e3","sha256":"5a3f2be7dd8069790a3bb5098aa704996a51c1c689459abf286b29a0a99a3d26","sha512":"2b962643ae9c9c3aec2caae066500f422473d23eab84cd3dbf14dab1b1bcd25fa0cbf8914f6a540b724b78fef89f4c952873cc2de3e733886f9fe03a57aa3fec","ssdeep":"768:G26vbkDR8P2NFi0uyoJ6TlcoZVJixSS/+Q1irAGMk8P2x9rzcXyz:G2kQM8Fi1yZTlZVMxSmwXM5gcCz","tlshash":"a203e027dd508ec7b10dd3fc7faa7db8839d5a01a58473de20f51c96332584a4e6b458","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-18T19:52:02.340933Z","times_seen":9933,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp910/B08GDC6BXT/51nqa1O5NVL._AC_UL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pc/gp910/B08GDC6BXT/51nqa1O5NVL._AC_UL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dVNluB1kRWLptd1Fg/bl1+yE5lZqnFgpm1gpPt6yfdFxp1E3HfowxehZfqf9WfxzNM1A4AJcZYHJywLVC3Ldx7vFSnXc0G45Vo6YwrJKOkk=\r\nx-amz-request-id: VYRG06BPJMPQ9R8A\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 13:50:55 GMT\r\nETag: \"cb24f33cb4ff359a439a0d73bb6d2752\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 35067\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 650x1000, components 3","md5":"cb24f33cb4ff359a439a0d73bb6d2752","sha1":"c2cd25233de083ef231ecb1e99144800c46e6d02","sha256":"e0c66d00c9f5ac611d2f61f078eb40db018df1c3af4046bca89a51d4d4088a86","sha512":"d0ae7b1278b28519a69abd0b69d83bf426d16ef8e87f2008c2c3eeb5ec0c32dcd725f968a87a6285abeff6e855ecf59a4cf4891eb12abb14a2f62dc74fb90ef6","ssdeep":"768:1K+IIdonHnMKYMvOjEXpdfUbHHOXMG5NUnLlRFdHLebFEPslsnQrqXU2:IPI2sBM22obHHFacR+ZxsnQEb","tlshash":"97f201b39248d715c8684bfe18bf1ae7fa8c90e00daf594245300c52be5ff902a1b5f9","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-15T19:17:09.061674Z","times_seen":2304,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":744,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-5a8a56f2.f92c99c5.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-5a8a56f2.f92c99c5.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"8097-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8097,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8097), with no line terminators","md5":"5698cafaaaf85d93abd3a456b499d339","sha1":"a53cd273373163a816a9cd07b4a946f4380a4700","sha256":"76cabc30089ced854a367a5182e37f3b5721890037b576deac5bf2269e431df4","sha512":"ccfef6acfe0189e73753dc2cb0cf939aa7364b18cc381365f1cee3e740ff1d622da982b6b92bc8a98132f23ef3059293bad0abf7067319064174e8e053777a89","ssdeep":"192:Iz5sbKYxgCtCowY2duLGm7AtmIfP5iPxaXo:i5s8CkC2caIIsPYo","tlshash":"4af1e6b7a0b2d029666bf0a9757895f87444d912ecd7c3e5f6887238ccc32e31656b0d","first_seen":"2024-07-21T11:22:37Z","last_seen":"2026-06-05T08:23:29.927903Z","times_seen":1883,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B083TRDV5R/51n3W0JxmfL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pachong/gaoqing/B083TRDV5R/51n3W0JxmfL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: uijptmRjysKv1Sm18I03jHM5Ggn9K0LuVvgA8KUiLlDXQn6Wicl7f/Lkhunpcd+R8IvsVsT04Yx8+omGnqYdtPMGSiyiDktSyfJbxGHwh8Q=\r\nx-amz-request-id: VYRYG702S0BX1VCT\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 20:30:08 GMT\r\nETag: \"024f3ba30a6e5258147db3fc66755883\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 25549193484395a6960481470b9eb8284a667b3fa147a766f9e725717aba24f3\r\nx-amz-meta-s3b-last-modified: 20230415T142456Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 60364\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":60364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 914x1500, components 3","md5":"024f3ba30a6e5258147db3fc66755883","sha1":"37d404ba13429e44bcba4d4a9a49aba6215e93b9","sha256":"25549193484395a6960481470b9eb8284a667b3fa147a766f9e725717aba24f3","sha512":"b02ed30d00443ac85d31bb467ee41c6efd3d395fd164a84b37ad5d9f4837a2415b2f9d04935d31665231dc776ee72aed285a73d16b0260957b5ef19d3928c905","ssdeep":"768:1R7PirN6neLXjYLRvqhOJdGEN9J+RhC0VRAs7BROG/bQXj9sNNIyMtSp7JN0/hcz:jrQtL4shcdG6JUC0P7rBbUSN6ggY+8","tlshash":"c643f29707a7489ac8f4343a5e12e1d4dd58ee5b259b6fca78f06f4d33060c326b0297","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.811188Z","times_seen":7475,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":738,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/js/app.1bdf2149.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkmallalliancen004.shop/wap/","date":"2025-10-30T00:57:22.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/js/app.1bdf2149.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkmallalliancen004.shop/wap/\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:22 GMT\r\ncontent-type: application/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\netag: W/\"1643802-1735398975000\"\r\nlast-modified: Sat, 28 Dec 2024 15:16:15 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1643802,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53503), with no line terminators","md5":"0bf4a8bef0c70871a193c3f906de029e","sha1":"66260ea5ced58cf35c1a94d38cd9cf3136e4d75b","sha256":"aca60edb51e265649f7f5b116d716046c32b8df353116a27e241f4d2921d5b5e","sha512":"aac2676278c0b1d9587305bd64eca65a1d875631510b2eb796f494dd1359d72de27b670b062e04e29f4b780e634ae247393027492fab1ede706158becd3b6787","ssdeep":"49152:1Bi3GOK9zm0/uXjtcFWlTmHftD9ucjMEpEJnPMrS/yF93L4n+/VqOVV8ZxcatkaE:EK9zz/uXjtbcjMyEJnErFYOz8/catkaE","tlshash":"4285061997e2c3e44bd837a1682363a543b4c6dbd6fe718f0b69d1d039fea94400e9b1","first_seen":"2025-10-30T00:58:20.018599Z","last_seen":"2025-10-30T00:58:20.018599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/b4fea0b7-8319-4135-ba22-a78892456e35.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-11/b4fea0b7-8319-4135-ba22-a78892456e35.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6IsuAUVzUaeeNtbHdfWJ+DveLvE91lpjBkO2pXaEuVGjtIj0wvB9QSZ2uLIMr6yy56lkyMHOvPLxxvBj1uoSZ4MsXWoVnQmV\r\nx-amz-request-id: HC7D773J9VTGPC85\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:04 GMT\r\nETag: \"798834cccc740a3295d495cac60f0149\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 164479\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":164479,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"798834cccc740a3295d495cac60f0149","sha1":"5919a207c2cc7faecd8997f61a87edd42a7bc91a","sha256":"c2dfff9df4fe2c89659ebf7be17b30643735145b0430a0db2b3eec09811564f3","sha512":"764f00b8a761aaed41926b5560eb93002271ad5e6ba9e6137648c66135309eec07c4acc5b865f88b8454ef5a425fa2b72d507535070064806d31fee8596306f7","ssdeep":"3072:mdYvJl0uOestG0Otpa1xKIfAhGGerpO9WOnaTJjFnVISpYrkq69gkpOO:mKRiYOGRtkjKIBOsOKFVR4kq6tpOO","tlshash":"b6f312426552c9b7c010be340e4959edc30fbbd5556e2d8e1f302b44cb4f997ba2afa1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.786257Z","times_seen":5750,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-637414aa.10f19374.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-637414aa.10f19374.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 868\r\netag: W/\"868-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (868), with no line terminators","md5":"c39ca13bdc2f4a622d1e12a41a629219","sha1":"09c1a5d40c3bbb3fc3e21b67c7ca886dff17a575","sha256":"9a0298fbd5163a4dbbe4944f7c825bac109b42227f6dc0d4553b69e701472896","sha512":"85feb07fc68ff6bb6d4646a662e9c7856e6f4781af897e9a0fe47e5a0a6b4560eff90bff5a84f694c5f8350edae14a0f794acffce9ab2dd41a6fa8c8ea3cb3ae","ssdeep":"","tlshash":"b0119cb3a176d932f9332c67374494eef19188e2e6528779fee7690cc08eb539620304","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-07-29T16:17:10.905903Z","times_seen":5987,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-3805cfd3.e6d5b997.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-3805cfd3.e6d5b997.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11290-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11290,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11260), with no line terminators","md5":"4a27cdf92f8ba5aa628bd79d9092c351","sha1":"9db22faac7978c45f1b12f6f61c76273e2bc6d4e","sha256":"e8836dff668e458d522717f17a49d772c9dda150f6b0fb32de79b769c96a6dd8","sha512":"fdcc361110dc07a0abff43aca27ebccd1494b537503265702be7309d6c59cdf084aaa0c61df5e91409355ba9fe05e6a6415fca460e755bb8a26bc24d27d22bfb","ssdeep":"192:ulxthRrXBronDsE/VnwkvHEvPXwVs5qtwyO/3aQ5QQY3tO/sC4V/5sum5XNgisE9:udX6Ds8VweEv/lD/h5Qf3tO/sC4V/+hx","tlshash":"8332d68c3591bc890a27b0f6b06b7456b0558e91540d1542eff488ba3eb7d6f571332b","first_seen":"2024-07-21T11:22:37Z","last_seen":"2026-05-08T14:37:46.608513Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-78328792.da8584fa.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-78328792.da8584fa.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11749-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11749,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11719), with no line terminators","md5":"c5e04a792ba59dbd2a82f02f64dd753d","sha1":"7406ef1c7539f59fd5b767ab977f25768ea83e77","sha256":"b67c6572d768dd6537606b33fd84067421845a25195bdfbc94acfbc03315b320","sha512":"8183f351ee3d3cfebbd84abd2911b58042d14f5bdb3845b0fbdbfd44b89670ab4ccec64c5569718ffc928fed66a7cd2493899fc830e992ece03f1eef040282c1","ssdeep":"192:6lxthRrXBronDsE/VnwkJ3i2gv419Ii15QtwyO/3a3O56QY3tO/sC4X/5dum5XNn:6dX6Ds8Vwcgvg9Iat/156f3tO/sC4X/H","tlshash":"7432d78c3591bcd90a23b0f5b0ab7456b0968e95540d0542ebf488fa3dbbc6f5713727","first_seen":"2024-07-21T11:22:38Z","last_seen":"2026-05-08T14:37:46.524689Z","times_seen":1020,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/seller!list.action?pageNum=1\u0026pageSize=10\u0026isRec=1\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/seller!list.action?pageNum=1\u0026pageSize=10\u0026isRec=1\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11891,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8bffbccf6e93332ba27888f90f4177e1","sha1":"a783ee0e277e3aa6a5855e2a93aee67b86094db3","sha256":"cec513202c61e4857a10680997b4902f71e85391a96a49d7151af5d4284bd929","sha512":"d8e607956d0626d9c28e765be07e2bccf3856bb87ed40eededbcdd664e5e941df3a348b29348cb113a14d1a7a0375e787c7fa763a595e9c05580c002cd50752f","ssdeep":"192:5RV7RsjdU3BQB95iSP5BzTtBXXQaopP/WgsrPm/RxP6duABpN+6P:5RF45BPfTXXQuZIGdt86P","tlshash":"0a32a5996eac3eb117680f936d073e8bc17c019f1e828e71da8ccf0526f8bb5560d560","first_seen":"2025-10-18T02:10:39.470437Z","last_seen":"2025-10-30T00:58:20.021872Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-04-14/d26d36b6-6435-4071-a1ed-647cf4e9214b.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: EQlFvXgDd5BI84WDs/ai3tCRASp5H3d8a9etOS3zYkq0RmDKyLjLPNd5BBFWjYiWVjNU/WbgnxLi0zX2A1yJtUJfrPJYYOFf\r\nx-amz-request-id: 76CXHYE0G3847XAF\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"60e10d77ebe5877fc1c9385748e2cf72\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 180465\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":180465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"60e10d77ebe5877fc1c9385748e2cf72","sha1":"77082da3f7af090dbcf9ac692bf2ba4e0d699aec","sha256":"f1343ddaa389f3aca6568d15637793f510925e7f88d13a6ff93591a326a66c48","sha512":"1a4999d20713081b41425f1f82ed3e7b5003e8f7024b18986a6f1e759e0cc797f7a0003c2d0e208d14261df253681ebe2795836541ff4ebb82b8763fbe5ce182","ssdeep":"3072:TrvxlqyFWPMUAy9v42Jxd3BDRnD748ezoCrW4rlfBoKamBYuWhNJwhi1nkx:Tr5AxXZvDJH3bnn7etB5fxzYhJb1nu","tlshash":"ca041269530c763929af82bccfdac921eff0210d0a74d75911cbf8e90a7a0bb91f2515","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-08-18T19:52:02.352109Z","times_seen":9701,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":103,"send":0,"wait":117,"receive":287,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/api/syspara!getSyspara.action?code=customer_service_url\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a7691184c58deddb98232138112f8f5e","sha1":"3d4be17b879eb66a8de8153c4c5ef601ad5a74b6","sha256":"0bcedf93de6b35c9e18b4650500d11f98d4ff01c67c14d7cf4bced48562218e4","sha512":"a9cf3529325dda52b4c29d229bd08a2a8332042fef49f59c84c5ce07fecd67bf5ad66a74cedabd359a0a7ae12e304099fc08340c1d9b5463d64ce8d068c0199c","ssdeep":"","tlshash":"ccb01201188c1c360556248d3c2d3908a91f101308e46b3adf445a2040990e81004425","first_seen":"2025-09-15T01:41:36.797923Z","last_seen":"2025-10-30T00:58:20.012309Z","times_seen":20,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B0BMQ8WCNF/91fTDjI24bL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pachong/gaoqing/B0BMQ8WCNF/91fTDjI24bL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 4jfaOGf76fG5KjxGfnYulV0HMWn3Bt9m854y+MGPnlUecVV2CVWS4CYNqY5kcuorv3e8r9dCqPvXnrXnwIDSOP+PHQltdzbhLgJpLo0majw=\r\nx-amz-request-id: HC7FNSMB9HZGE3J7\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Tue, 21 May 2024 22:38:25 GMT\r\nETag: \"d97df150aeb10281fef09028e4d07108\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 720fe80f1335b908e06827689e13021992f6c937ea3d4677e68ba28730e529c2\r\nx-amz-meta-s3b-last-modified: 20230414T110922Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 414495\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":414495,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1229, components 3","md5":"d97df150aeb10281fef09028e4d07108","sha1":"a7606a2e5b733d842b2af8379dfdbd82c216311b","sha256":"720fe80f1335b908e06827689e13021992f6c937ea3d4677e68ba28730e529c2","sha512":"878e28a4eb570611bf54e4287cb7ff3cf5a039ec4459d4364bb632410fc0e182941f7120f2a9b6852732a68d31748fcebf9a948e656b87eed226b8f9cb4d284a","ssdeep":"12288:S5A9jNzghSx78Ew0WXf/sJStZ50HN2kYH6aXvFhI9:S5+0ynWXnsJYzo2kYTXvTY","tlshash":"db94238d1f8ec82ce01f6db3bc6134d0112d2fd97659dad5dae56f46005e2a49ccf2a8","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.05704Z","times_seen":2456,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":845,"dns":0,"connect":0,"send":0,"wait":126,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/vendors~app.e68c9730.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:25.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/vendors~app.e68c9730.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:25 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3556889-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3556889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14507)","md5":"848a37338b24b4fa65006a159c5f2832","sha1":"8f11219ea63c241e2544e5f31d246e65ffd55ba4","sha256":"aa9209544f04e0affa6dc41d0a43582879bcc3dc397e0a86b60ed30c1b6ce1a4","sha512":"a882544b25a37e6c2a622c5712d83c0434369fec4c7d2c6e57fa63151ebf43c1274f3fe8b8c6c65db04e55ccc5dffc5fd583200400cfb0d38c47b89a80dda700","ssdeep":"12288:wYLFcwkbVvGphhAiKIgXwfWornIdZLRJaOLhQnwkZ5lvz1JT:wYLFNavEhNKVoWorIdZ9fDkZ55b","tlshash":"123519cd7285b46253a371b4407f240bb33a2959680e8458f665e8da7c7da4e633bf3c","first_seen":"2025-07-29T17:17:22.139204Z","last_seen":"2026-07-19T16:24:13.417179Z","times_seen":259,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/css/chunk-vendors.8ac7a150.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkmallalliancen004.shop/wap/","date":"2025-10-30T00:57:22.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/css/chunk-vendors.8ac7a150.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkmallalliancen004.shop/wap/\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\netag: W/\"175515-1735151418000\"\r\nlast-modified: Wed, 25 Dec 2024 18:30:18 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175515,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"75e09844546bfffa3360097d103573f0","sha1":"80e3794d764ac3bff61bb8be28b0e0de49099181","sha256":"c261635de7c86d1b9f9997251e55f5e54c3ed0905b778c82a165900b44337cd3","sha512":"56c9fcc654aa1659c75eedbf8a6f07c95712d99d69d2a2dc7f1f3fa778b106a1fd473ad25fc2ef0e64a1a3356de2f5892dd313a16b11b34060aac190bc376936","ssdeep":"1536:PDlp28Y7SrW3YeWXA1u9w4HCe/l4NIhO8OUE0iZkA5SgY8exTvOXNrjnPr7PLR/C:PMT1Hmq+R5ozTc5F0gGSSurxmNH9yDf","tlshash":"b104d665cb4711aa3327cd399bc0a7a89a54c332da430ea5f581741ccbe7658215bf3f","first_seen":"2024-09-25T10:54:53Z","last_seen":"2026-08-12T02:26:28.730437Z","times_seen":2020,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-11-01/b1365176-2126-4b52-893a-d823ba7fa752.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vyVE/+M8Lngu0sq/rEbwfLfxgWhCUtAPlZzymCSpe9oNhwLpOSXCJR8meYU+LNLkcQMJ8GazfUftG7RKGhikY0nlUHsEwbjG\r\nx-amz-request-id: HC75TQNDBHCPKQ6J\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:36 GMT\r\nETag: \"57fc8f526d4275ea03d2bdbdc5576892\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 170933\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":170933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"57fc8f526d4275ea03d2bdbdc5576892","sha1":"648d7e45b5f40cefb1d18bb9c726fa2194627313","sha256":"5b08dd67e7ff0eb29804f686a825a0607fcfad5e509780a30adfea265bc26d6d","sha512":"046bbf2c489dd817458bb078c2a21eee87949f983e0924087800414acb782c41e1e777873e9bf43ad90c456a764044b9a142646b88ca61a2589c90e0a31b860b","ssdeep":"3072:uZZZCa4TScGLIk8FhGOovWdjezklGcjjltrXy2zm423z7LOOCAr:u3knH9GOusjezklGGltri2zm3fLNr","tlshash":"a1f31238ed7ef755a4fad15f910cada0a0f877204832a5813e37d7d437c98a192eb249","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-18T18:12:32.148081Z","times_seen":2524,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":726,"dns":0,"connect":0,"send":0,"wait":119,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-4a688b54.8fe95911.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-4a688b54.8fe95911.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1118-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1118), with no line terminators","md5":"51469bb71eb3ad53d091813383d59f9f","sha1":"2dc9da09668fefdab35ccfe6c6a3ec5485ceea3d","sha256":"d9daa1e1faf153cb40d02fe3294adfbf28aeb622797e00cf94c101ccfcf0e073","sha512":"aba105e77a63de395ba92e7d7557d7b7ae209f72dfd735132a2b4d234f8ac75e09d4acbeee7b2cd6e25307285d4d3a4988e9b8b8758761b595c96d20994bfffa","ssdeep":"","tlshash":"d221cef1906510385aabe6b430f0a9b9705df145ea63199c5d6533ad49d378f02e02ce","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-06T14:40:04.435641Z","times_seen":5604,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/newOnlinechat!unread.action?lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/api/newOnlinechat!unread.action?lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"472e9a7530675f76d965067fcba6278d","sha1":"e1fdae764ba06c37792e7b2a2549c88cf3350b09","sha256":"26de7e215697f7b90d77581633fd7fe0b379ba230d1a9c1a0b502ed862b3f5bd","sha512":"7f765b18a1b6f5818daf3905ed24ae9f4283248ac7a41bfcca65dd1be696c9a741d510629b6134940784b3cb832fe3be7fa76881cb2d01f226e1246a70039e7a","ssdeep":"","tlshash":"47800000280e2c0b08032088a88c3a0080ae22a308c0cb308e8cab3080ae2b22000830","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-19T04:10:00.2895Z","times_seen":8796,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shoptkmallallianceo.s3.amazonaws.com/type/2025-09-18/7785a3bc-f936-46cb-b964-6542ffa8b778.png","fqdn":"shoptkmallallianceo.s3.amazonaws.com","domain":"shoptkmallallianceo.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.17.120","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2025-09-18/7785a3bc-f936-46cb-b964-6542ffa8b778.png HTTP/1.1\r\nHost: shoptkmallallianceo.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: pPMdtUwjXhT8BCfl3M9hp0vxI3Sm90d7ZnpVKT74XSr3Oh1JE5cLoBoalbVQHC1Z38qQsksvqpguv0kaYi/nqpw+iwWU91Au\r\nx-amz-request-id: 76CMPB2GYPS6XZY4\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Thu, 18 Sep 2025 07:08:58 GMT\r\nETag: \"5ed79982b7745cb4ad2caabf78a5d399\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 338059\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":338059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 702 x 312, 8-bit/color RGBA, non-interlaced","md5":"5ed79982b7745cb4ad2caabf78a5d399","sha1":"010ddd653d2705363ef3d3b85f75aca59c4fee69","sha256":"05b656052bcaea6084ca39fb7a5c646a6418bb3b4287e50c49a447bbc9f6a919","sha512":"6e9820d10b0c1ae6f70b694cd9d7341936756bc1753f3ceeb3bbb9e5a0a90377a6207d631bd3691288d416461069d64ad02f4e9291b1b4738d9dd9b130261c9c","ssdeep":"6144:+oL1U754iNcrNT5HPBtktNYNQu24p0MWTo6zanPCzU0lBA78:tOderNDtktGNt2S0psw0PPg","tlshash":"2a7423cbffa05988b2019ccf4d5c0db67191b0ef716e1f0da0a1226da8e42f7b5546e9","first_seen":"2025-09-30T03:54:30.288296Z","last_seen":"2026-08-02T20:19:22.192855Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":448,"dns":29,"connect":97,"send":0,"wait":121,"receive":295,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/40488675-237a-40d9-b2d3-e5d53b0e6455.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6YGs7JYn8bbwzMqvJ41xf5AE+yTy3WhQF/YzBNauOWENX3dvTk9nAatZ7sVHj6ZOjzMozRjIxCOQE94MZChA9X0FxxI22qvn\r\nx-amz-request-id: 76CPMGNF0H84JG9M\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"a5941f987a0fe015714bc8b8cde4baff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 44216\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"a5941f987a0fe015714bc8b8cde4baff","sha1":"88c88146f9813942943df5777e08d4486db3040a","sha256":"41da4ebe3b85b5ca006db2a633baa60593618feeb72f3db99e110d74e1cbd918","sha512":"937d3c4add07ef443e201c34e73eef5cf558a781c5112a81719a989e4ff4c2cc29f2bf35739cec929988409694a4518fe862820b2fb6c18d71b4195954700628","ssdeep":"768:GTRG9BPKCHP1oTrfNz7uVdkyQ5CmHjrYaBsDTtk9GbLf+H:GT8QgP1oTzB0dkyQ5Cm7Bs/u9+CH","tlshash":"52139d478e489f835014d3fd3e079e6d6b891b0c59893aef19b31eab3f216521c8e54e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-18T19:52:02.226622Z","times_seen":9952,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":228,"dns":1,"connect":94,"send":0,"wait":119,"receive":94,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/e06b455c-8412-4866-b1b3-653027bd1c10.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/e06b455c-8412-4866-b1b3-653027bd1c10.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mUfUDYVOoByBfoNwNkQcNDhTvYMwB5DeFyISt9U+Iz9NiScdFb8imXQ5KoAHqZhOTAGnO3b3PUmPkuV4UUvn/OGuvP4/aoqZ7FpiR0ej0Us=\r\nx-amz-request-id: HC76RZ0JT251QJKF\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:36 GMT\r\nETag: \"c204487a7d3a52dd08d0cb8bd82d4383\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 116417\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"c204487a7d3a52dd08d0cb8bd82d4383","sha1":"0d1d0939727c3ce06382233272c124b3e0d023e8","sha256":"522ae93f5824674a9d56c6bd1e7973d5b98b171fbf00cd8e36369a842d416b6e","sha512":"c22785e439d2531161a142ac57571ad5d611562164b20454af4dd5e655c0e36b33d7e3331f77d5d9a7261a70ca92b3f1d5f34bd11eda38aebb5b0af30b1716b4","ssdeep":"1536:Vs2stZYxtS5hzAjXqCSe9lMKHKoyqBxglgPqUN0OWw2axsLUUNIBorXcQxs8ASz1:q2ssmhWXqCSclqoJvOTw2fLTN0EX08VT","tlshash":"8db312936325991bc7ed04734ab352bc6f719903775c5324bb01a42e59399c8ecccb5e","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.898262Z","times_seen":7455,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":645,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-3805cfd3.85ee17e2.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-3805cfd3.85ee17e2.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 410\r\netag: W/\"410-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (410), with no line terminators","md5":"fc805b781c89c799b666c4fbc4aeb200","sha1":"fd06224fae1c2c2bde5a18ae89ad003e03d5fef3","sha256":"a69b97003c8dfe86e112829516ab7dd637a12b08508d6cb9049741ea93868576","sha512":"2c06b84040f5df4f5486d754fa36dc5acfd67741c94e929f9c94994c1e7e71898c1fb336dc6be4e8568c2bd0c449b0e34e8f392cee6452d08874382a90856bf6","ssdeep":"","tlshash":"09e0a942010a1e2b2563f42ad0820707b665fb37eb42d2409ee00a080f9b30a38383e6","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.364867Z","times_seen":6986,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/c8ec458e-d863-4987-962f-ffcfe4f54175.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-07/c8ec458e-d863-4987-962f-ffcfe4f54175.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JAVLCvr5CHdSkEICus2Z63fh3mmNE4ctgV6nGu4kJR1rleK0N0HRYLeBjPiS5kayJzaihup1szOMXKl6N9Z58i0JFyN3xUN4\r\nx-amz-request-id: HC7C7XFDYTHQ1J8N\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:48:09 GMT\r\nETag: \"f87e7fb1936b7674ce2db3ff1bd51be9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 70050\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":70050,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 998x1009, components 3","md5":"f87e7fb1936b7674ce2db3ff1bd51be9","sha1":"74046f5896c4ea5701895a0bcad36116deffd811","sha256":"15161b624d29b2f059293432a831953d9dccf18ebf936b3d3c270f12f152a1dc","sha512":"4bf20c3b3d382756dd00487976c63700cabdb9273be6250cec348f8a27604c9fac9a4317cfd7b4225da86e197896aa28ee32b2f53cfb6322ae45a989f2fdf3fa","ssdeep":"1536:xf/qZ8RjuRFR+sLKaSC5PHX+PShIh+jNZZYb:xf/zR8FknaSZSCh+hvG","tlshash":"2e6312c28746312bd3da7733236f4232f0dfa3f6db2248dad208214a52ec6a41d794b5","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.841903Z","times_seen":7023,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":107,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/b62216d2-e350-4603-a071-38ceef9857ee.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/b62216d2-e350-4603-a071-38ceef9857ee.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1SVlpxh4ccmBzsVVQRG/jUQvyokfwtVS6zBR2uWEONy1fy2sYd3gET5AOEvVuMBvQmgDmu/F24QEgrwsO0lBLtDCPHwawkR1rFDk6E6D1NY=\r\nx-amz-request-id: VYRGCCVW44K7YA8V\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:03 GMT\r\nETag: \"e38c7b2db29e613281d1f649ea95bdec\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 65290\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":65290,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"e38c7b2db29e613281d1f649ea95bdec","sha1":"0e4ecd0f7030abf581c7736e8cb1776928b5c346","sha256":"68e7f0f0cf6c41ef90650252073c37bb7421bbf0b7dc6d5ea2e52cb65d04f1f9","sha512":"b64d3be04d7ef4f8139729a1c8b1244635ca6d0b55f2d473cf4a408ab7d4d0cc7b029b20c922b5bb071446719ebb403f0c1c9031070e4e3f766db4f3cdaa0e57","ssdeep":"1536:/Wx3LzPn5TzxLbM/S3O2bEZdB0P7bjWXQAuunq:exbz9ztbMcbwdmHjWKunq","tlshash":"7953f27a2f90778cceafdbb54061f2c5510dca2cac01a67e174512fa9f58c8e9e923c5","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.801721Z","times_seen":6771,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":959,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/d29f0843-33ad-4b3f-8a90-b56fc21b0e77.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: YTBQ2rnJcB3PjrsZP7elK93QTPUrBSoFkvyLn5JYMWJNjcaBN+smifmU4eVJFYDdwLOoPFyYDZGi+d34ooX+aRGYOCgBDhQ3\r\nx-amz-request-id: 76CKEVMMHF7V2ZG0\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"6a85f34af56b3c034d5137d4ec807895\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 49034\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"6a85f34af56b3c034d5137d4ec807895","sha1":"75fd4cec7f44e8b8f20655dfdb165720d7223bd6","sha256":"67488643bc9d3ae11bd5cababff694c1f7a131c289d81eb79e25576f78dd4fa8","sha512":"d827fa0cf605ede5b060c72333d4552c1a930b0d8eec8052ba78949ea5e54a58bf0addbef05e024159a196589abbadef866f8c4d5f3c34722ebe1d9757563f9c","ssdeep":"768:G6O88eZQudaEcS6tJCXfvmmxmxwc3ndr/8wP/x49gE3bjt1Txv7ZJ:G6OYAESJCnm2IF3t/8wB49giPdFJ","tlshash":"5523e18725805ee3352fe3f6ff065ae80f088f64d1263edb21e54f98b312a238595428","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-19T00:56:35.783545Z","times_seen":10082,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":109,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/ce21709d-d03a-485c-bd1a-0ca3c11840fd.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/ce21709d-d03a-485c-bd1a-0ca3c11840fd.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wZLujjhFlWG3qGIWbPUPq+dx7iq/Wz7PeX6nYXDFEpwVZAsAT7RirRU70Yxlr7rNpXc/ZXAkwMUixOOVE590MN8NDYcZ5lsalbo0pAB5yVs=\r\nx-amz-request-id: HC7E78BEDPXPMCAY\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:55 GMT\r\nETag: \"4d6bad8f76dccb096768ff49cc7cf445\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117061\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":117061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1410x1423, components 3","md5":"4d6bad8f76dccb096768ff49cc7cf445","sha1":"de7037cff667ef30de1bfd8e6b7ceec7c69dfc42","sha256":"0d98b6495a5e33454e197017e474fc8e00ea09e9d3e72d6bdb54ee943ed1fb40","sha512":"8bd3d378f9633511746f337bfc2cca32278fdbb5458cb2f7d23d9f3167a6372a172196821b864488d9f30f326785276baa112893754bad58dfd10b15ad0a2cc1","ssdeep":"3072:iypv8tQzm4aYSV7OHP76tr4EbClnokN48XL:iyp0SApOHPsrfbbX8XL","tlshash":"1fb3121b9b295d27e3c7537156210310963cce652895ee3678457f8e3caf3aee88c98c","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.056582Z","times_seen":2444,"resource_available":false,"data":null}},"time_used":1440,"timings":{"blocked":559,"dns":1,"connect":94,"send":0,"wait":117,"receive":190,"ssl":457},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/afd940a2-7696-49e5-a23b-ef4091c6be16.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-11/afd940a2-7696-49e5-a23b-ef4091c6be16.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XpNFzEtm1wxWsJ+LGegPkriZODrXimBtsESKagPWAyFgFIU1Krbwlp1FpKQVSn3yjCvPbGLRuY3iSmHOtI0wPRQs3IyvNbgP\r\nx-amz-request-id: HC7F5E46VACVFVQ3\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:02 GMT\r\nETag: \"5c856b901a31b431ed87f5e70ece2e82\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 32548\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":32548,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"5c856b901a31b431ed87f5e70ece2e82","sha1":"3d36dbe905fb3ec08d6e8fcd0a61f98d77e016e5","sha256":"b8a774934093913b41038bef87cf16ba142f42b56dc355c0f616ac698fe6c0c5","sha512":"3035c4dcd9cc694c9fbb367df7108be00dd1627c8a7280cc658a4e47ed0d1524ec3e9ca940a1ef0272261f1732ab1804b0a752976a5b825781635933e0545eac","ssdeep":"768:1/VsrQ3PEM1qQdGRlh7Cp/KRiGD1n5MQviY4cE9:1UjAT45ciAYDiwE9","tlshash":"b7e2e137732d99fada286af10f6763502b878cd7ebb4150522632e7026511b07d7e0eb","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.848928Z","times_seen":6487,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-356c00b0.0adfd21d.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-356c00b0.0adfd21d.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6372-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6372), with no line terminators","md5":"786ae01301166ec66d3273a6534cdb39","sha1":"dfe9e880e9f2dd9e86d5afc9697cff84269a3985","sha256":"482be8cb87659ae3634a07f3873cd639b3e6fdb311344f984b53eaeebef035b7","sha512":"ba2f97d0615e004fc4835cab4a721227f698f0820a2e346c2f5408fdc1a9a88aa91f34a7f3e6063c307fd0e364c14dd969af1a96d6166a7308ccd25d831c35bf","ssdeep":"96:N6Mt/NsTVUWfrMSXH6ftqgIldI9OwnZrvVJBCpn2Vn4N/UJjlVsc3YC:NVsOGrMSXH61qgCI9pn5VWj43","tlshash":"3ed11a0bf05278bc895b6294311b2338b7702bd0a040486af73cddbc66d9d68232b77c","first_seen":"2024-07-21T11:22:37Z","last_seen":"2026-05-08T14:37:46.502572Z","times_seen":999,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/8f28f605-9543-48c6-a4c6-e8c636de7e5d.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/8f28f605-9543-48c6-a4c6-e8c636de7e5d.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HzRXdpug9D2I6N9aUq65Na2Zvwc47wgsEW7nZFj3zcLzprp6wnzFA5pMwf5xLxPEhzAgcwudGXM9ksgQzeDtLIiWB/0WYp+GwCVsZ2hekp8=\r\nx-amz-request-id: HC7178JWSYSZ9KS4\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:37 GMT\r\nETag: \"57ccd4508cb9aa0770d6f99eb7d7aa41\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 43286\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43286,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1258x715, components 3","md5":"57ccd4508cb9aa0770d6f99eb7d7aa41","sha1":"7b297c1fe1347760132907f13ee3ed23e053d9d4","sha256":"39111c493bd0463e579cf0032e909fdb655cc21522f36c4c14d7cd6aa9750dd0","sha512":"ffdd78eee99d87340cf1389a6d92b02d2a9153926ffe67637b6c53376e6d9137549a7e0bbaea224c78cdacc83e572b014492754138357ec1179ce28018523e65","ssdeep":"768:18mUreUHhdqjj4ULRe7ZXEjL8vnXGyve23R3lwt/5u2Uy8xQ:UNmjjpLRIejkXNve2h3lWx","tlshash":"0313f19fb28a6941f1480c7ed2b8769fec823732256d6577ed75931c1b3b4403d90ab1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.848362Z","times_seen":7300,"resource_available":false,"data":null}},"time_used":1173,"timings":{"blocked":1058,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-15/06a0b04e-09e1-41ac-a5cf-166c098d530a.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /avatar/2023-03-15/06a0b04e-09e1-41ac-a5cf-166c098d530a.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ilBwAiRamIr8kv/SXnukgQMW1Mva+9NKorHa6TdirGEjLKAJj7ra/2dfnq22GXb5ytqZirL75Ij6WxSgTstAqRXScx3G/tLCaIJPtlDDt54=\r\nx-amz-request-id: VYRVC3NDT4B1AW3Z\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:38 GMT\r\nETag: \"2496b5f58efde072ecd0bce81fc5fa81\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 7351\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 274x184, components 3","md5":"2496b5f58efde072ecd0bce81fc5fa81","sha1":"72b0ff43dab1e217b2908fadd5e39e2da7b28aac","sha256":"ead216638492bc0d63a4bb42e9b8578a8366d37badb836d2be2f65c1a7066449","sha512":"d6bb1eb21f108053f6902a0782c64e79ef9306f15c8bdc040cfb838080912b87c7bc33b2beaca84224b4d513d7cfc2b9aa504a01ebddfb95278e3454ce79f870","ssdeep":"192:vMPMEcgpqpBB5HJig5pfA2ZIeM1lDV4SAAwet:DP7Bri7apeTaTs","tlshash":"5be1af61c1396716c8d57ef7435e3a234f09e809231ca3b2d71a32ad8b0319caec3a25","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.864987Z","times_seen":1977,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":906,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/5b2e7318-d3dc-4133-9cdd-a3e8bd8dc152.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-11/5b2e7318-d3dc-4133-9cdd-a3e8bd8dc152.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eaNTdtYZQ4BcSPQOeg1D6nNv5wJf3ieeTRwoQaVV6vexP26fl5CLRwa6vvc+NOJ3lOKXsP5zGFzXxt6Y7UsefA5Np6krsBZA\r\nx-amz-request-id: HC7FKPZZA2697FQY\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:49:28 GMT\r\nETag: \"5221395ee29242605dd924706d012aea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 169277\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":169277,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"5221395ee29242605dd924706d012aea","sha1":"b5c84a3be7b040a8bf20336a09f01ce3d5da1910","sha256":"fae9f02ada935d525035e324b5903d79ee5309649f5f960cdae175afc4b53331","sha512":"1ab8304fd377e4d5b80dbe1f012e9487909f3b2ffa5a93dc9737a5f9efede99a7a8bfea0ed77b5f68ec50f4331225384158cf9111962d6ab725c3713d4998104","ssdeep":"3072:ynvPz7lidPtJWsDWW9EHbiULa6gZ5rqLAwRc2zhSKjFBKLn+AYmF9x:oPvl2PtQiWNH2eQYAwRVnBK7+AYK","tlshash":"77f312c84c01dd7f9e0a1d14cfa31c32d1ac4716d51842839129bebe86da6fa7fd963a","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.823256Z","times_seen":6419,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":118,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-1fd26ca8.80a05a7c.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-1fd26ca8.80a05a7c.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"25874-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25874,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25866), with no line terminators","md5":"c3185407bbd1a529c29c8306fdaa07cd","sha1":"5e1852d222858b6f445c4bc7717a4a7df488fe8e","sha256":"3afe56b6e880cd73f8b7a5b31bbfe8a348ef76b6835048c91aaadfe78e807d77","sha512":"e1f577601a88d2073bf23e0172a0615d5205f3aa343a9d4d0a85db2db91b27dfd8f6a90cda5632dc54b163cb3a0688c4e5e05a7c3315f5712a9e704dd1fc9e3e","ssdeep":"384:6osnVXOdCkZXaMsS0UBlDKalA4NMrh+/QeOYHWvzdfP:KedLsSdBlDCU/eYI","tlshash":"f4c22a47a4d1ac7d8b977259341f1294e6762f85d442cc96b63cd8f4e2bba30231b72c","first_seen":"2024-07-24T00:38:16Z","last_seen":"2025-12-14T13:51:49.25656Z","times_seen":545,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/38e35767-2052-47cd-8cc7-573464957f89.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/38e35767-2052-47cd-8cc7-573464957f89.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: h/XPCoYzkYC1Ve4UJnudsr4KIL437jqwGRVgH2gpKAOt4ZDtmz2TsZ6K9wl/LxdSDTGQsPQPk210Xun3eBbM+M3SPP/lqfwv2hVwPtIsb9Q=\r\nx-amz-request-id: HC754HV4AD0EXW8C\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:30 GMT\r\nETag: \"2e91d081bb998d2dddda0970b892c068\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 131190\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":131190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1110x1500, components 3","md5":"2e91d081bb998d2dddda0970b892c068","sha1":"af2243998869e67409f2286640fcaeaee6c70f3b","sha256":"3e4011f81f02eb72f8166c17ffdb60bd2dcb460319f122f87263a28ae7c132d2","sha512":"d974bf72387778c4243d91d1e4f0b7eba43cf7d9daefa2c52ca2dc38f2b463c530654f29fbf5fe239ae51e5ef4a1162e5aec6d917af1a803e62acb2bca3164e4","ssdeep":"3072:nd59GfT6nuj7Nkf062TrHvCFjSYnHL4kjwflZOhhQH8xea:nz9JujHCxr4kj4l4hhQH8xea","tlshash":"0fd31293668555b9e87107fcb8efe87ce11bb8a047dfedd9856008513b88b0f7e49102","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.917452Z","times_seen":7148,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":600,"dns":0,"connect":0,"send":0,"wait":110,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-3bd464d9.7965d38a.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-3bd464d9.7965d38a.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6846-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6846,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6846), with no line terminators","md5":"a48ebc3f2b48206822632005b6d9990a","sha1":"353489994565d3a2740e3e6149ed3321e16781ae","sha256":"013141cca9921fd5a2087d71230b6aa7fa4cc62b39a5f635e1d3d3345b6b661d","sha512":"503cd4332f41275bb0c3c8035ceb4b198879c90c5817d7cc9614c51e87fe3719c132bed7242c3a0fd3ccec24bc5df92391c0f2959ac18cc36b8ff85e7e260712","ssdeep":"96:cWUXz4UsG8OOOOOOOOOOOONaHYUt0bgCusCoG5YNDwTsoQiEbLGVk7AtWA2WyUf3:cXz5sbKYxgCtCowY2duLGm7AtmIf3","tlshash":"84e12bf7e076e029b76ba2b931b465e93810d911ecd787e9f244762cccc31931a1a70d","first_seen":"2024-07-21T11:21:33Z","last_seen":"2026-06-05T08:23:29.890817Z","times_seen":1864,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/right1.57c427fc.jpeg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/right1.57c427fc.jpeg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"4805-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"57c427fca0d84bc0a092d9034deed77f","sha1":"e47ba5c89f052526d7eda2aad1a86336b3319aa8","sha256":"913d611036152ecabefb26e4ef79c198a2779ea1e5fca384f6a6b159d0babca6","sha512":"df3edf66df0741f19114843d93cea243ad98efb17a75f4a9d07f7ad80b006b110010eb0feb96f84f6ae57d9e5408096812fc528468f6a7b42c1ead3e8595d171","ssdeep":"96:WhC4SzAFMLFwDLyk6KPTLPwrAO824idlifhcL1qYIwEfRHNRXb9z:EJFMJiOklLLGvG83ELRXF","tlshash":"e3a18e4f67b66c5febba8bbc04184f942512dc1159321f7905a05c195d2fcfad9603d1","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T05:10:09.619904Z","times_seen":4662,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/right8.b1412bc5.jpeg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/right8.b1412bc5.jpeg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"4948-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"b1412bc5ba0e763ff23aa08e3edfaedd","sha1":"d47b7b57f0147304de91e48497863d4bc90f2582","sha256":"a787935def85b5205fd886da2128855c877ab64a61755efee88d38c3f53d8b26","sha512":"d008c03d079a300f48904ce78873596b45e8d763f410e1707961ffdcd8786c57d2c78e9b191f42d50fba60009c78b843cdd0fd8cf4d3faac2c3d913c9cba0c5b","ssdeep":"96:Whjfa1ZcZcf9nqATAMmrGxCMpAdWWxzq/SVbFNXJakuuHcPL8z1UlmXexHgvMjH:Ej8Zbf9nXTYMpfWZbFNJuu8PYz1LOxHv","tlshash":"a4a17fcc3a345e7bff2491b3768b17391718092524bcc37921aa2e2c3e0ed704869d67","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-14T05:10:09.620687Z","times_seen":4740,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-000dfe6b.148f433f.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-000dfe6b.148f433f.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3625-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3625,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3625), with no line terminators","md5":"5d856ee88b3591842edc98f9c697f3cf","sha1":"cb39f87682c3d0cb789076a58acacea774b0a90a","sha256":"3e0f75daf2c30cd8230e8779aeaac9189afd0b1aff1b50258a0851b0ce65469b","sha512":"177ee54cd06fc29040f182c2a2a37eb7cb2664d9d250574ec4e8f428042ae59affba129acdc053c6e49c28d55de0c76a61188ee92f6c9f92846aa21deb3c1694","ssdeep":"","tlshash":"4e715b11ba3d62f8f426c11e6a46984d7711f117936f84f6afe0d47aced3a123b3019a","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-06-06T01:22:22.673816Z","times_seen":4473,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/e1158c3f-a786-4374-aab7-3f4dac76589d.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: w99PCu2kQwIUNxkW/5J4Q3Or1TgN4JjNssUiAuMNf6PaGRrausO1SPu85jfkPuPpQyUnTf4Yp+CptVIihEeTQF465ycHkKKN\r\nx-amz-request-id: 76CMBE9HJWBCZBTS\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"dbb5460537325e381060d6a696bdabba\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 66319\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":66319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"dbb5460537325e381060d6a696bdabba","sha1":"852c6ea174a0fcdd7e7351b5bc5c1ddc309d87a1","sha256":"3ff029feb7f2d1b0a7bffa8d5060030474f569524abd014585f373a17fc09695","sha512":"404f949ebbad69f94ae8b173c2c1d8807599df69c51675e3b0e06bc0953f94f95a51914abd77bf684dc3c5ff42249defe6152bf148f4aa8c1515fb8d29879374","ssdeep":"1536:Gi+tPxNX6ucnz4Zw7vPYpNuirA5gmQGo1CISuKbKNiI:F+tHKucnz4Zw7vPYxUpPHIS7KNh","tlshash":"cc53d0a31a450fd35629e3e67f0799284fc65b8d94e039ee11d358e37ba13b3680e11e","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-19T00:56:35.820914Z","times_seen":9952,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":112,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-813bed94.ff6f7da2.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-813bed94.ff6f7da2.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"16198-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16198,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16198), with no line terminators","md5":"75983192dce0b51dec90da3b3fa32d0d","sha1":"3af0ef3661a45772a908035cb9ba9993fe802bea","sha256":"5f7232798bb2b19d1a1f24809955f50507a9e26f87e4de4d0af6babe518e3a65","sha512":"447e300d3c34082f8a828824acbeb6dbd53a9f4464832a6fbe41bcf95b34b6cd358f4a5fc983c65a1e69043c8e77d72e74fdb0041a83409fb54aea6323fa5cde","ssdeep":"384:Ox25s8CkC2caIMX5s8CkC2caIIsncjUdG:Ox25sVGU25sVGUIsncv","tlshash":"86720bf1f530a13eb897647931849ecf7844f909e1f696a6ee84b62dd0c65a3273834c","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-06-05T08:23:29.891509Z","times_seen":3235,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-5c861bdc.6758f1fa.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-5c861bdc.6758f1fa.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"50530-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50458), with no line terminators","md5":"47711c9fa7a41203f78bda8eb383e8af","sha1":"d4f371bee98af95a06be0f1d514a68581f8b3529","sha256":"12eeaf688db33c7542a1391762b042e74db101bf0e7c115dfbff30620d41dcab","sha512":"ddecdb69ed3d6a65b749406ac302217fb8b54ee1bde6ff6d482266790b64c2c8b0461008f8bd984803b69a76f0f3a47a666d054dbe450f6857e24b08f1bb41a6","ssdeep":"768:ZXluW37U3NbqUxeV4GQ2jD+XJhBnCV9PrywHR3Jwm0Sqk4i:548qvMOXIxyg3J1gkZ","tlshash":"263318576228b46d5e6656a2305b30a0a2a53be45408849ff67ccdf963dcc243b0ff7e","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-11-08T09:49:22.252202Z","times_seen":365,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-131c3a80.d40cf9e6.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-131c3a80.d40cf9e6.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6600-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"da2de257c0c24d89e65f962205a1138b","sha1":"07476ddd635e1177168813b38ec243cf0006050a","sha256":"b07267c8d45bdaa39bfb686b9699e548994344e24c4d652fe92cbfdc4e77a6fd","sha512":"87e22c0a0c414596069748f4c2d0bab523ad0014262c90c2178898e5bf8fcd3438353ade755de221393c0b03090d918296bfa8243adb9c736a92b3d63b7d1f58","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MCg:Zz33lSD1v30I/LPxDWrhxuuzI","tlshash":"57d1def2f231112f7426a53be1c385e8bc86b10e93ffd686ff84b514da69196063518e","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-08-19T02:14:12.485792Z","times_seen":5439,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/2c9882e2-5834-48ac-9326-2fcb50e3f03d.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/2c9882e2-5834-48ac-9326-2fcb50e3f03d.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SpwNxjbckpr6SWg/fpycQGE0F8Ti0IwOvHGX3qIzeqxwI/46tfxUoQ+N52OlpJavHueocEz0pCd1Xi2xmMshNRmrMIIch3cVE+DFOEXYn18=\r\nx-amz-request-id: HC725PTMA574YZA9\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:03 GMT\r\nETag: \"e20b3cf0277fa3099d6972dd28d24abc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 15607\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 802x521, components 3","md5":"e20b3cf0277fa3099d6972dd28d24abc","sha1":"84d0691dcf51b356061d534f15b0d525a74ca14d","sha256":"4c7f74a7416671cabecb63179e3ccffca56fa748572c201b258b4a386b56c27d","sha512":"4b46eef72d81a1487e47a8424dba9e855df286ebb4841e4fdfb5208b65c2483a3f3a148e529b1711aba34da55d3493c4292f2b4b40b050ff9f8130d40cba6f97","ssdeep":"384:1o70easHMM6iAWmDWgBefzTEtnnRo8sKNdyqbAafK:1o7aHdWmDWmyvya1kA6K","tlshash":"7062ce521a0f3984e86d297e452f27b04b679ee3f12f0c91307ac112d2e49e0ad9e0fd","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-06-11T23:31:05.332006Z","times_seen":2298,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":1057,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B082Q6RMD4/51LNp4aSxDL._AC_SL1340_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pc/gp/B082Q6RMD4/51LNp4aSxDL._AC_SL1340_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JgyCeAgym5TEwzFaJIJrSuBF0Nb3NLd4rx8Sm2CXVL9uLoZvDl99jLa9ka793YXFl+q6kbGeeNHhdJnQM6dV19Z08y9NYjw+ByTmkaJHZCU=\r\nx-amz-request-id: HC745NVW6ETC4G1K\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 02:54:04 GMT\r\nETag: \"8827b56e1c75a8cfd6be59a5b6d760eb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: f63ce9701ef5941dd9ce6ac432a09e5636f1e0685ede2c4aebb39f96638eec8c\r\nx-amz-meta-s3b-last-modified: 20231026T124940Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 32549\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 431x1340, components 3","md5":"8827b56e1c75a8cfd6be59a5b6d760eb","sha1":"24f3ff786d1c9fe9e787bd9d1977b90aa1d9c3f1","sha256":"f63ce9701ef5941dd9ce6ac432a09e5636f1e0685ede2c4aebb39f96638eec8c","sha512":"233fbb69169772f8a86abc5ea61ae787e1d9b003148430041b7d3e38adf1257e53f1bbb07f31f7893dbda96679864f8d78d9587298deb69013ec2612f7a02d49","ssdeep":"768:dx2GWbs6oBwPJj88PBuMQmJOcjEiKyquTxPOKIjktU:Oe6zPJQ84vcjEinTxGKIjSU","tlshash":"7fe2f10582cbd7d1ed521c7225fb3336df24eb0ea5fad05d3b202b86951ba652683c51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.068021Z","times_seen":2435,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":547,"dns":0,"connect":0,"send":0,"wait":113,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/093d9f58-2c6d-425a-b3c9-1898b0aca760.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: laI3WYUlsdKe8sLfIcf/hBQXGZ0y8JA/GvsTZ829u4dm8/yKMJG/dLc5hb3BeLeBjw8rARve6YIv/2d4N8Au3EI8oM6HnJvLaX7WWbVImU4=\r\nx-amz-request-id: HC73DAYRKTGZC3QG\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:44 GMT\r\nETag: \"cfcc313a94dfb8530acb5ecfe5dc53af\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 132447\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":132447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"cfcc313a94dfb8530acb5ecfe5dc53af","sha1":"4ce68057416501691588568831526f3f621377e1","sha256":"616cefa8fa49014d34e31d96d913620bf5252ad75654db3924f71a05834202c6","sha512":"fc051b5d6e2a87267ee275655fb446499cd4f41eca27a43c7e3666fedcb37364e65086055b0668434a8e8f0c9ca176c4f9570de51dedeb85e37304804be91846","ssdeep":"3072:ErQx7WJnVeTJWMRXz15rKYLbYeZu4G+gqg44O0wZfeN7yC:KQOnVMgeyH+Q4WWfeN7F","tlshash":"28d312c06b111bcbe5c83fb5227a928237e772399493fd323981d26e59d1c78a237d42","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.087712Z","times_seen":2403,"resource_available":false,"data":null}},"time_used":1370,"timings":{"blocked":564,"dns":0,"connect":0,"send":0,"wait":135,"receive":174,"ssl":497},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-7bbab158.1c98bf87.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-7bbab158.1c98bf87.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"12002-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12002,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12002), with no line terminators","md5":"83be9b51fc42cd06797de9f54d7f26b7","sha1":"620ba6842d08185d11794f8888d783380a0863e0","sha256":"0506b29ce2ea414e73812bfe4334ae14ac42539dbf9a0dcbec991a656659c8b0","sha512":"aba294ba02d11b5f1eb933d92a73e6f928868a344c2000df26f0ad25267c68781363113ee780d1359622526d9342c29ae67fcee433376ab227746412d618c576","ssdeep":"192:Iz5sbKYxgCtCowY2duLGm7AtmIfOxoi7k2Xer4f412QRAelWklFbaiWsAXU:i5s8CkC2caIIWxoi7kGeriscKYtsIU","tlshash":"51420b72a072a33da927f1a57468a8e83440d526dd9383edf654713cccc62e32672f5d","first_seen":"2024-07-21T11:22:37Z","last_seen":"2026-06-05T08:23:29.961222Z","times_seen":1778,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-b44cb87e.e5fa209f.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-b44cb87e.e5fa209f.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3101-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3095), with no line terminators","md5":"a31a0f3e04a66c5fa2993a8d2fed681a","sha1":"bb756bfd49c28b9dc42e5b662a279bf8dbd33f08","sha256":"bd29963aa6cfeafab21ebf1df3a38d3e075c0fc16cc0fdb2a078325d509d9ccc","sha512":"e217818892e47de07f577a934d8d3bce9f85d1d3aff776f1844e00ef30c79485907105e9f05e15e95f19f02d7a532cf2603788a9731d46652d5185bfc22f3c43","ssdeep":"","tlshash":"8351325e5463f4beca9e5026315db230a0313fe28845a4bebb74cd999298d61330f3b9","first_seen":"2024-05-31T07:14:58Z","last_seen":"2026-06-03T23:39:34.626596Z","times_seen":2594,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/d2355e87-0f42-48d3-9924-966b9fd8d2e0.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: LPYEsKNjS3uk19kuhLJ9UkFSFZ0s51YxWGWs5+BbbdaaixaagqkONCdbat1e5YawNdXiZZkJ0FQKxUtUBpZmvHuGSTP5DIDD\r\nx-amz-request-id: 76CSX3KD23V0XKEC\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"3fb702f913ff64c272d67742c3fade6d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 28164\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3fb702f913ff64c272d67742c3fade6d","sha1":"9d59af9b1418caaf57ed3f938074958affbdbf5c","sha256":"effe7b76be1c47da3ab9aaf81e6542743506dc40affd341687094417a4feea49","sha512":"1be15380d11c4c57f3ac922aa8d945afa256b4fda813b5254fe3ec2fd8b01fc242c8f9faf79a25245626438240e63d8c68bc1e3dc6c8ae1569b363e28f99c817","ssdeep":"768:GkLEEqGMducsX2FbPZlrPr0YFveH2fzquxgfI:GZXvducmObPZlrPoYkH27hl","tlshash":"3bc2278b59484ed3a46d93e5be970e9c6f453b4ce88229ff10924fd77f202664c4d02b","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-19T00:56:35.866493Z","times_seen":9945,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":524,"dns":0,"connect":0,"send":0,"wait":112,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/goods/2023-03-31/e176f2b0-1aba-4fa7-8696-c56d6f9452b8.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /goods/2023-03-31/e176f2b0-1aba-4fa7-8696-c56d6f9452b8.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: pGi59VpY9apRGtAoKY/v0NRz436OkLv/ivySh0L+7TVTD83GQ5BJTU1mzn+04khyWnalDwYWq2d76ql0L1N2bSTolHHrW59DJ8Ak1aW+Mtc=\r\nx-amz-request-id: VYRHN3HXZR6BQY5B\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:40:10 GMT\r\nETag: \"d41fe5fce66ed4dc3bf1fe64e18c2159\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 90073\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":90073,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x1200, components 3","md5":"d41fe5fce66ed4dc3bf1fe64e18c2159","sha1":"87abf9fde0e3375db455b1a9784d165757315ca7","sha256":"1ac5dddab96f0c70eea490a04579aef746677d90d3c204c74dee3bc17ef57b94","sha512":"236b84f90cbe5b337dcecf1f884fcb09370573a34e86e74f90f0214972b3f20ac46fa08760449fa65e6b3fa8d8afd4327d7d7856bc1d3e247aa1f4218481c564","ssdeep":"1536:byNX1R0c4VpeEH8Xln8Hcal0MyuFmCg75X9RGU1Pchv8dZ/MI1eWbJ2y/:bO1RmqW+R8HcaCMyuitRGUqhv8D/FEyZ","tlshash":"999312bd6418b871e121e7e7286912d3a82f64c6532fe3d3cbb4e78e60c4f851d5b861","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.920935Z","times_seen":7091,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":757,"dns":0,"connect":0,"send":0,"wait":119,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/logo.c97e6464.png","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/logo.c97e6464.png HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"3459-1735397255000\"\r\nlast-modified: Sat, 28 Dec 2024 14:47:35 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 276 x 66, 8-bit colormap, non-interlaced","md5":"d08aa02724443ede4cf14ea6d77b65a5","sha1":"0a0a96d1f4531b9b4f74609c774149b2d6436cb8","sha256":"317707def397ea317dce0f2ff06b87c1e0cb8c7aef8302a59a6463b0a6f69692","sha512":"9fdaa733b9b6192080a0392ba1407d694f30fa17a81a082b7ed87f6b364926717ae56e0dd645f66bf867a86ae39c548b6679bc77522be6cda7f4f3f8578dd26c","ssdeep":"","tlshash":"48614d8be7288d64c295507e3c18a0a81f66f5b7f0211bb911a49ff99c479514c83124","first_seen":"2025-04-01T11:12:06.895463Z","last_seen":"2025-10-30T00:58:20.043332Z","times_seen":87,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/d80b2606-3bc7-47a2-bee9-d040619a34a6.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zGtlWUxo3ef6up4pyCbnMSqUelfSUdQxVQVLve2a00pBBajH+uPteJ+3lPxifTewqtcOyvTwUNez837bjVW62tRkajIDyUYg\r\nx-amz-request-id: 76CWNZV5T4TCA3P9\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"ad3bb72e6cf979df37c56cc70e70710c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 46207\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46207,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"ad3bb72e6cf979df37c56cc70e70710c","sha1":"f0bff01c9d923ad55250ef7de41afae41cbe3f90","sha256":"50294b071e29cc9e8afdac176dd2fbc62f4c36265d5f494d96a7ab2908c1a643","sha512":"1fc3e1b07a86c34fb8c9720f8ff8c2a584cfb6dfe7b4e34d53f2f0555e558fe95f5a62bad4a6874a64e081cddae0defe530870d76dcf1551ca45ee570b582ce8","ssdeep":"768:GOSu2YQp+gujkfsasYaYtu/tgiE/c1tcDkV2FynHs5d4RX3S6cqUrolLoDzT6S51:GOt2YQVujkfTJaYg/wU1SYSJ4JcrsLo/","tlshash":"4f23e09b86804fdbf03acbc53f272d985b41fa0944d0b4fbd1e986af1f65622285c48c","first_seen":"2023-11-07T02:37:44Z","last_seen":"2026-08-18T19:52:02.275218Z","times_seen":9933,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":236,"dns":7,"connect":93,"send":0,"wait":114,"receive":94,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-74926972.0bd1ca12.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-74926972.0bd1ca12.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"89105-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89105,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54759)","md5":"17b98542d286b81ac2ed796cb35f9c64","sha1":"4bdf5ffeee53be6c7a1e720138fd63b562ee2cc1","sha256":"43bb879cef41b63008f6eda1e44865f5320444038e19772a9538c7bd5c8d8499","sha512":"a6c1dfe2dd9cd75150ea9ed78f22c84dc2d5a011f6af57f050b72018ccc0d4ec5f90e87831019aa2008b33710de9d614bad1ad56ee76c01ca6d52143f46aadf7","ssdeep":"1536:XVpb5uz9we4EPsStPHXannPzQY2Y2eN8ce9PNoZAlE2f:XJ3qHrY2g+ce9PNo2lx","tlshash":"df931a88f2d5b17603a355e0442f140bf176a929a84988a8f734d4e1bdf4ecea47bf74","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.631042Z","times_seen":2832,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d0fa772e-25da-44e1-a9d3-8fdfec84f7b9.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/d0fa772e-25da-44e1-a9d3-8fdfec84f7b9.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yzi1EdLGqUxHVUq8eryaY8i81RzYOUEl6RxJ53EEY3iNTDQVgBinONv/wGNYLGZ9s1XmpKixstiU5lTKQwNbOwdcfa9RUEJxN+aQ/gKDTa8=\r\nx-amz-request-id: VYRH9CMWRGYCVRCV\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:01 GMT\r\nETag: \"2c56a052345660ad6a7c6e688a1a3058\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 166741\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":166741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"2c56a052345660ad6a7c6e688a1a3058","sha1":"0fc34a8a0d5743e9d81ecae6cdeff33826d18444","sha256":"26f3ba0fd2212969ade9b2461b240d4da8425282d4b4f9b7b40c2d7fd7dcb95e","sha512":"56761466613fe6f3d07ff0d1c8e525f979560761b976154d8819d3a927a553af5245007e90729a21c2c5dfdcd027e50bfe1f705603921b8107221e7b9ee9d31d","ssdeep":"3072:O5Rlx42wKJn9+MTwXUW+msjBQpN4J8BOzEtMBoN+kehPvasuZEbDSl5NXt5VR:MRlx1TwB+nQrozScotMfSl7NR","tlshash":"00f313950fe64c41e667703cb0f824306bb25894d2512daece6684410eee7fe6da717f","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.804393Z","times_seen":7261,"resource_available":false,"data":null}},"time_used":870,"timings":{"blocked":756,"dns":0,"connect":0,"send":0,"wait":110,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/09f4347f-2277-4985-9f28-668a55470136.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: EBwwB35rTA/YaSYILyd20FTnlWl67i75Bc80KRKocV1Atl25C4VAfui3nE1zAyMOBytxHnC11xKmUOJKXF+dIwBhNup9qaWg9VRcQd+Zya4=\r\nx-amz-request-id: HC72ENEX1AH2ASND\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:46 GMT\r\nETag: \"6c0d8870785f0488d0b7142263a15170\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 117525\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":117525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1417x1500, components 3","md5":"6c0d8870785f0488d0b7142263a15170","sha1":"aba57b51e93b5fd1a624f84850eadbaa1c110bad","sha256":"3a90f757acc9d4e5d3088beb21be69f9542bd7e056d6a936d4b920ed7286b665","sha512":"04e4da2f923f15b3c32d6329c9e2f1cbe4ce58f8f09fd03823529da74504d1fedf8317083b1ed370ae9917cb5fade27933d50d4506c1b1e22f373e6d421c7551","ssdeep":"3072:FpBFO7JLZw6p1LoD9WiupE9nfmQXdxt+jm9p033qF:FpBFO7brLoD9WiUEFmELtZp06","tlshash":"f0b312f876a8e373cb7a3e3801d9e95e9c62d16e653ed4524c79144d30100f6c9ce9ae","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.087197Z","times_seen":2465,"resource_available":false,"data":null}},"time_used":1406,"timings":{"blocked":548,"dns":1,"connect":118,"send":0,"wait":132,"receive":176,"ssl":426},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-68f12e90.27a370f9.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-68f12e90.27a370f9.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"4695-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4695), with no line terminators","md5":"2abfc31d2a6752d6d66f5fa21c7fa262","sha1":"63116607f3b72d74be9d1bdd5050ac15859f7243","sha256":"9159959031e6a701bd2e9e5baaa03c4f14d6c2530977a9e013c8af24c4838a37","sha512":"ec6bd33bd4a69b9e93485dfa272e08170ac3c17b0aec5f291b716c1e370435f6bf26fd7b2139aa75790defcf2223f4deeec07818a549334ba069f8a307201127","ssdeep":"96:VQrF215xix1yXSl6nS65EaOYIj8MRSLRsR7S6m0Z8u/j/20RO5sR5WFs5E:VQKM8F9","tlshash":"77a1b050b15e162b687bfad9187cdd4cb0d6fe2ac1324b76ed9f24148882e733622235","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.500613Z","times_seen":5224,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/a7892ec6-7c9a-4017-92d9-5d88ec058706.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/a7892ec6-7c9a-4017-92d9-5d88ec058706.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UN7bIdFdHFic/U/gdjB67WSI1NUlj3MbuWHsxLeC1zXfrrpWiZ7J7fouJs7jyJg2P5qGtUtHa+cCEyeI+/6T62fp8e1hZ8Qf7Fu9NotZmbI=\r\nx-amz-request-id: HC7A09RJERK1FPSF\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:31 GMT\r\nETag: \"4733341abffafac1a80a87d73b929a0e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 46462\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46462,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x816, components 3","md5":"4733341abffafac1a80a87d73b929a0e","sha1":"2ed57cdd64866e32ea7315eab53f957943fe7535","sha256":"488b95a8657fe774d74f2c2b03f858888868a277580ae75cd4c45796bccd447c","sha512":"e1db1ff22f5f486ba861cbf7e2e6cd4c701fb2610f9049bae3e4112f7e359d8073e7ada5c955122817689e00b314a5bbd465b325c264c277ce73c2ee61a67c48","ssdeep":"768:1Z94x5KIpQt3/N64yyRimzuVWddwpQairYmoxTWHoJvtBy9ZsdVj9hLvRH/pVexD:n943DuRLyWisu75iRYTLRQsdVj/LJH/G","tlshash":"032301f73328b9a2cbda05741372f6a03265f93716fcb6024450fa70b16c552f598b6e","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.803785Z","times_seen":7578,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":651,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/fonts/element-icons.535877f5.woff","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkmallalliancen004.shop/css/app.9673018c.css\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\netag: W/\"28200-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-19T06:24:20.652052Z","times_seen":29533,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/f638f5c6-610e-4035-8a7d-1b49bd18a6ea.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: B891akJHCi8ONrWPCObj0KjIB2GKkNex19HYsHTuRsmZalgSY389SIkHKwhy5iwhk6/GBzG7rWI9xxVIt1BPeu4zMo8SPM76\r\nx-amz-request-id: 76CVSDRTSVPFZH8K\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"b367a1a2939abed5721ba1cf5fd272ac\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 43151\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":43151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"b367a1a2939abed5721ba1cf5fd272ac","sha1":"14494a7fe1017a29f9fed7421f7d652257490203","sha256":"46d322495677c8a7c5394e265b4ff29491e138ca470aa1ca2d8abf364db9cd21","sha512":"2952940e26d548ef1b5caaff6ed0f6226a5fe3333be792544289621e428353943df8b2c80303329041e0b0308b6fd4961d0805110e5d74bf4bfd3808f3c71117","ssdeep":"768:GAnBvnXpOznCDoX5cNyXgGjFLhpx12yVa6+kZL/4FIpV8xoeKzHMkLFr3:GAnBvZOzCe5cNAgGjFNpb2R+4gixovLF","tlshash":"4b13bf87ad198f936454dbb87f530c396bcc1e1ce8463af910a52ed72f582094caf52a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-19T00:56:35.782681Z","times_seen":9586,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":238,"dns":4,"connect":92,"send":0,"wait":113,"receive":94,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/ba21b1de-1bd6-41cf-993d-cbf59051931d.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/ba21b1de-1bd6-41cf-993d-cbf59051931d.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qU1mf4VNUUdspS/Myh4t9LK4co3gfJbsrrSMsg0y4EOXDQ9qmrL1rzXLRAl2KudonaPnhv4+6ZxLuRvEXgFcSI6XgYOd0/QMv2I+ct/R/Zs=\r\nx-amz-request-id: VYRKBNQHXWPG7E26\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:12 GMT\r\nETag: \"bb218f576009cd83b9417c5a229c3203\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 47710\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47710,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1468x1500, components 3","md5":"bb218f576009cd83b9417c5a229c3203","sha1":"77dff04586788827f80934d71f78f4c88f8356df","sha256":"d0855f819cdc09557f7e383dfbc5e6165e09a50668d15dfd0210949bbdaaa17f","sha512":"7f485bcdf0998dc22d4c9737db92c707975451d3f002fd09c92f23261204700dc22f93182ebb67e07f99d78358027eaf008a78bf02935f590589defab99e918a","ssdeep":"768:1gD/OoEUQEXCRL2xwGC5fTS16JO8Rb5fu5BPqETeaHdQ1DIzwOhLTKh:yEUl+SGGCJTSYJHb4BxTeanxhTa","tlshash":"0923f1d3174348cbff782937b4a153a3677ba5ae219594b3a70078275a423386ec42d7","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.920422Z","times_seen":7182,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":790,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-2d216994.47ffaba8.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-2d216994.47ffaba8.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 255\r\netag: W/\"255-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"e7949dc2de0878e849cf3715ca6be5bc","sha1":"9421c37479babb994e0a9ee0c7f0056202ebadb5","sha256":"2f91706fa1cba12f83256093aea5c62de8712ceb61a05d8e559b0b54d1b7af39","sha512":"22895c7a4eea5fc7446053efdcd741cf6d762b1cf018c3b498d7c43baec63a91e79c504eb7ee0b95afde46b8393803ce02f02eb0a1d9eb956719559dcbdef49d","ssdeep":"","tlshash":"6dd02ba6b0627ca6c55b3081026ba363342e245a0edc106517f146d42275a1e81159a9","first_seen":"2024-02-11T18:17:18Z","last_seen":"2026-06-03T23:39:34.573208Z","times_seen":4036,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-43f51806.7611c246.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-43f51806.7611c246.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"28956-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28506), with no line terminators","md5":"920f3a5fcaa7dc8760f8b2bcf6890b4f","sha1":"29f9a1c0e0755a6cdb4d7755ed660e8e5b9f1945","sha256":"0b5474ad1e36d3cf68ae7d2abe3ff821aee7ae6ce93b820cb2474d186d4ef3ee","sha512":"5ef53af003f3cfe4c45e8e23ad7e5f12868c9da95584be853e7abc119bcd7919548366fc4a82dd45d1e1936a6a5cdc3084d432ec3934cf1f0196eafd454a741a","ssdeep":"384:65ym4ER6lTT2yRvFR1GNw3VrgPnk4JGyR:Wym4Eglv2uNR1GNw3VrqTX","tlshash":"31d2d84e71a17c8e031a4261745f2651a21a6169740ea0dbb7bdccfdfa9cd241832ffa","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-11-08T09:49:22.109197Z","times_seen":377,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-7809be7c.b2f91b7f.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-7809be7c.b2f91b7f.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"32146-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32137), with no line terminators","md5":"167538d25bbd27ccbf88ee03725cb986","sha1":"2e5c47ff53bbf6a2278f817cfd717dc57fd858e1","sha256":"86d06ae242a767284c0647b45f3f3469334c7a6b30012bb17356a280457e1ddf","sha512":"49687d91b4d40791a059d0e6bcd82b5d62953da58ce620f997ebe69097603e4de8fd41fc39d6290c96ed4e020c40c95fa11356dfb6e61016db281ed9088b7efb","ssdeep":"384:X5yZhQeA00Gb8pImsq2bkykyrpesLAgyYKRiqZL/u1G11:NE+/AwbgyYZ4Z1","tlshash":"50e21b539125f45a5ebb6153315a1492a26819e868089c47f2fccdf633ecc382b1fb7d","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-12-04T17:36:49.612147Z","times_seen":590,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-91f4e7e8.d1277e08.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-91f4e7e8.d1277e08.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"12297-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12297,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12265), with no line terminators","md5":"62ecc99cebd7658d11b5c1766aa2c424","sha1":"0908ade7326f569e2c39704f42a4a0ecf08e274f","sha256":"a5c240a1488a39d90fd96148382135bcd2b1deb36dbd61acf0d8f1f0780c7f6d","sha512":"f4a2e543c6a2bddf9b2d5b2fc94fa6fadaa160826aa88db7ca5ae7d4bb2a0e37892b4dd3d0d925db0bc138d02d78ba82d98aa9e9d54acc694836a5676f1a1347","ssdeep":"192:5Bo3gsx9fnS9gHJJhDJzfNcj1iXcFW32I5eAW0Tu8M5hHBaSLob:g3x9Bp9zfNcjVWgc05hq","tlshash":"9742950a7153b12e5d6b81a1300a7420b6743fe94805d08ab6b8ddf977d8c79732efa9","first_seen":"2024-09-25T10:54:55Z","last_seen":"2026-05-06T08:37:36.260683Z","times_seen":841,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/activity/lottery!getCurrentActivity.action?lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/api/activity/lottery!getCurrentActivity.action?lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5b85c39fb769eb183b6e5b8519ec3a00","sha1":"ae8be787b4c0500a7125bd129f660d18541d9da9","sha256":"ba3dc3cf6e634921eb9eed57e39334b4517b5b8b09327a935ff0d5546802c12f","sha512":"68d10a3cc895858d8bfabcd41db64466b2ce4907d7844dd0f69c6a4b83344aa7b3cda0ba2accbd5e81a925652b4a7dd2580316c1d0b30379f80a10ff687fd176","ssdeep":"","tlshash":"d2800000280e2c8b0803a088a88c3a0080ac22a308c0cb200e8cab3880ae2b22000830","first_seen":"2024-02-19T23:01:27Z","last_seen":"2026-08-18T19:52:02.347524Z","times_seen":3132,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B0BBN3YQNK/71JmApgdVAL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pc/gp/B0BBN3YQNK/71JmApgdVAL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: yFx22LCMhPGohuO8isHpNmgkRHDyGKOZ6vLOSCiIKI15XDRasvaEM9qtfS6GKyBVJ2//BJUBWixmXb8iZux4taX5lkhAnujYYabe1PKw/vA=\r\nx-amz-request-id: HC79RKHAG7FH8SGG\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 08:38:38 GMT\r\nETag: \"0f4cce1cc723e9f925010640e9160383\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 9169e20d3f597bd917dcf828b53045e7c31ce2687d137880cdf7aaee623271e5\r\nx-amz-meta-s3b-last-modified: 20230915T060118Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 107843\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":107843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1082x1500, components 3","md5":"0f4cce1cc723e9f925010640e9160383","sha1":"26061d213f8afae16359eae39d295f69758aa915","sha256":"9169e20d3f597bd917dcf828b53045e7c31ce2687d137880cdf7aaee623271e5","sha512":"985da409670855669c845a9f36826cdcf2d6f2762cedfe49f907d6e77fa4e728da769069143411ad59dd98428f8082e391d9c473b50d3efef73adf76c82d1e05","ssdeep":"1536:U2R6KEPTEqfuefyBue/Ja4VCT1AXZyWGOsvv+9TPany3/2pzM1UoR/R0cNRz4mTE:vME5BuqAN4Zlcw/UUx/RRNSmT8rb","tlshash":"53b312f92c292e8bf94ad2fd28f213024245e5b8050f35f84ca45615c6cfebc9f62936","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.064511Z","times_seen":2417,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":857,"dns":0,"connect":0,"send":0,"wait":115,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B08HD6SMMY/61Hmfj-ZbBL._AC_SL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pachong/gaoqing/B08HD6SMMY/61Hmfj-ZbBL._AC_SL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8IL8ufNwmszN5EPaGCEQoX68h1grSmn6EHTdSf2EZ3axtK4I2zOsdyhnwvmKDJ99+0CPIfIG7/t42cabr0mzAQpJo9Un0R5/EqdqLFXHL1w=\r\nx-amz-request-id: HC73SGNRQYT05AS0\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Tue, 21 May 2024 20:59:39 GMT\r\nETag: \"a1734188bf728af1d2bc1d1208e0f770\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 8474ec05ed643c5a71ab1b8e419f23ac2093beaf3a310b98d9b70713795d4c4d\r\nx-amz-meta-s3b-last-modified: 20230412T102755Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 98499\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":98499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"a1734188bf728af1d2bc1d1208e0f770","sha1":"029eb0c3d5fc7fb25561834526d3d84e90b79997","sha256":"8474ec05ed643c5a71ab1b8e419f23ac2093beaf3a310b98d9b70713795d4c4d","sha512":"1c39aff75617b9d9084fa5f236d558f2628b634588aa3c0d9e3c3ef441e44fc1f6a4949e7f93499d2239e239f075c03a310487538a4462113c9b569dd7637ced","ssdeep":"1536:YciMX0EafziFkAOm13oJcfUeCjvmaFekNsjfl/q7s+QkAVb4QQCwtp:8EaSkAz2yfUNvckNs7o7shd41CU","tlshash":"e4a30268871a5e8bd0a44178355adc417f20b2e9971f217b01f39ffa89b0693f221e5d","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-17T03:09:46.855116Z","times_seen":7291,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":968,"dns":0,"connect":0,"send":0,"wait":117,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-b4023030.24a49a80.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-b4023030.24a49a80.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"59837-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59837,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59837), with no line terminators","md5":"dd59e82d0950111a062f744f975eff8b","sha1":"3e76c1208cc46c3012eadf76907ef2404c5a09f9","sha256":"a458c9d312fcba35e029dd6e66588bc4d0b78929f54a1705ac3bde8629352578","sha512":"ca00db5ed2d11a26af55ae19f2f2d6c8b1c6bbd6b4628da322be7c73370cfa3e5f762ca8c2df0f205b353ac701b942742fe546437314554db4145ac21edd4cd4","ssdeep":"1536:fDaeK86yPWHJtxEa+BZtMnzYcXbKc7rfqtCZG6v1f+yOgv14:fDLlWHKBZtMzxrKc7syG6ss4","tlshash":"4843d03720d3a4d31f2ac162324ba84d8d769badd182d5c3f278b989ec5fe74535e098","first_seen":"2024-07-24T00:38:19Z","last_seen":"2025-11-08T09:49:22.210887Z","times_seen":531,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/right6.b8bac159.jpeg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/right6.b8bac159.jpeg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"5087-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5087,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"b8bac1593a48bc443848bb3a683a551d","sha1":"308b1b03b09b9865605a8210d0829847ae0d27e0","sha256":"10a746b60bfa7ffee5b3cb5d7b628ef08774e826d869a9418ae618da09219b61","sha512":"b4728b8792aab88c835d7058e7ae673c20e2d421d0e23d57b7b3b5fc69b00dde745ba47586721c3f5d05fa36f914aca9b483570011e03ed6e90b9772de3cbdce","ssdeep":"96:WhxxYqBhBnFMEKYhu/hCbjftpvzaHZx+RxXP+1VHaWccmRAi5Hx:EPdn2E2+nba5uZ+1VHatNl","tlshash":"6ca15c81f553fa1bdb8293b099a43f100f217c332be267bea602581c1847ef21479b96","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-08-14T05:10:09.654876Z","times_seen":4737,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-4007d5e3.073f08e1.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-4007d5e3.073f08e1.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"18181-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18181,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18149), with no line terminators","md5":"a52f2276511c6fbca34027ae0c8f2522","sha1":"8869c556d4238de97a0268af336dd45e8e075efa","sha256":"aeccc7e65fc3037aaaee3670ee3b7f826edb1c8aaf32190e9e83018a64be0fe1","sha512":"a96b8306a8cce1e6171cc2a9d5320f7678113e199aadc98a8f5ca61cc4db81ab077edf7252f28312f18e481de096d6108561f76376ebf5499e86457df7e45dc7","ssdeep":"192:l/OwDwYwBvpMXmj+YtcjE3Y7nG95lr5/JaL97fGUlni+3I5qTRiA63Jg18z3Jn5z:lWU3wFImipjWjja5XioIYRiA63Jg1811","tlshash":"e782a68ba651b45f0e6772a2309b2403a15862a43c0c9d56f27dc9f637bcc782b17b7d","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.531362Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/06f91542-f535-445e-b3aa-04e3fb05fe8a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NUZAd0sLIQGiKVOXpoHz+mB0wRgFhSdrcCbpRJsg+wyM2nY+QXV5LH+m88To5GHLsD7iuEOMxDxPjB5+jHw6YSkodrKmHqo2\r\nx-amz-request-id: 76CYBPEMQEM0GSE5\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"1b8714109ac1c300a6848b18f4b10531\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27057\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":27057,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"1b8714109ac1c300a6848b18f4b10531","sha1":"1c40a9917624327dcad395e8d0a9a204e24d73d0","sha256":"952d26075b0ffa3fd64c6add8791e566a5d7010f52382b468a3f1672c5496320","sha512":"4a5388c14a734141ce576fb7e988c90418774f74d2641dfda2714951ce30264714baaa6338374f69d053de8e232efa6e658ff156ac04412adcfa3d6c41a3b94c","ssdeep":"768:G7DH6SIfn5ChIqflgQY2z+CR8hUywK3cD:GRIRCm3QY2z+nCywKE","tlshash":"2ac29d5348089fc7b13ac361bf031e6daf96bf09d495beeb10920ac7bb34655ac4d128","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-19T00:56:35.864837Z","times_seen":9755,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":525,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f7afcb31-8430-46eb-9114-c2bacf56fc71.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/f7afcb31-8430-46eb-9114-c2bacf56fc71.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: +H0fDiSbWyatKSylIKuc2keQzxJFhZ/Es0q6WmFK5v75YWcmFEswo3bjRBqEdRjvAr7/jnf52cJLMr9AwtP45PAEjXxkTq/5HILnUByppJk=\r\nx-amz-request-id: HC75PPVWMTZE8YTR\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:26 GMT\r\nETag: \"4c85719fadd1dd49d50764ebb37f8bf4\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 41611\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41611,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 724x889, components 3","md5":"4c85719fadd1dd49d50764ebb37f8bf4","sha1":"202bd373f578df56177fa741f81f7961a7d0a9d6","sha256":"ee62d20d0f0ec21165f8f72ccdcae8656724084b83fb33275674a13ab9d9c283","sha512":"5226eaff0fba868be39aad762b79a4354cb46e4c839a841e5dac176ab4daeacef5dfdd0449a9f0c8b5294d64033bfb6048d635ca4e2f5c231588def6bca34a9e","ssdeep":"768:1CSqOAnN5XScHDhNwdErLTQCBLnVh0xiS/aNBFx2yggiujl+fhBQUkypJ:gvOQ5XSYDDUe3QCxVg9y3F1Xiwl+fhBF","tlshash":"8913f064273d5020c5c106be425bb6cc1fe5017dabf789423ae45cbfe469f92aca1887","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.860397Z","times_seen":7377,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":1054,"dns":0,"connect":0,"send":0,"wait":114,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/f204d4bc-b984-45d8-b4c0-c64cd323a50b.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-07/f204d4bc-b984-45d8-b4c0-c64cd323a50b.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SKuIZnAcvkYrUXjNgT7RLhvs2MeVdcy92hCb/M4ZbQTv2ZOgrhhaMcO7JCL8j6v+4qynsg2Df1kogoYG0PK7OwD/Mln2p81O\r\nx-amz-request-id: HC72442ZG7GSSG1B\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:48:42 GMT\r\nETag: \"eb5830f9537ac75127130551276084ef\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96209\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":96209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 552x1500, components 3","md5":"eb5830f9537ac75127130551276084ef","sha1":"79cd82c86181ee69f0202b0817623ed0ddcd9753","sha256":"4c513da923d6affb6789d80dc2193fdec698edf2269ee75adcca490a8104b007","sha512":"267cc959d96d988a6ad817851bd3e5407e41bc18c4a8e8a46179bd78795059e6712136967e43df45ed73723bf5aaa0bbd1163bbf848ef613acb19d2705fbd3a1","ssdeep":"1536:vukkjh8CymhA1P3GeueP0JoPu2cJ6fMjnBMauEQohjoK/9kOLSDCkp:vdkdTIP3wvF9UOMau4OOLSBp","tlshash":"f493120be0874b5ef89f06b843592a17a6fb51dc294b0891f3b68dd08652a50dccf2e7","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.822334Z","times_seen":7063,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-6820d330.441c1de6.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-6820d330.441c1de6.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"21870-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21870,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21814), with no line terminators","md5":"0a3f63863af1968c703618c709b448ed","sha1":"007b4891a9e67b065c25ce06aefb504bf4ff333a","sha256":"89834c123b98caf6e9335f845e13cdb91c935ceb66da5ad97b65ddc9f8d10e52","sha512":"c22924d316943812e016a9d3c06d915475d5f9b458fa401fe95b130f496472db88daf17cb161e7cf17eb5b808c351d8ef08e650d31dfcb27a6d203d14196f5bb","ssdeep":"192:PxthRrXBrBBcE1UxZB73GKG8QBNgtTkBsdQ4y1wTYDLihWL9VeuuyWwQmcuG/qiU:XX3B/8D72yAlU9kH9YPAA69zZxyRIOg","tlshash":"5ca2a30ea145fc9b0fa272a5701f301160528454680a9e57fb78cdf9b6ffd29662373b","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-11-08T09:49:22.161521Z","times_seen":364,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07V3DF1QP/51G8uW4FLLL._AC_SL1010_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pc/gp/B07V3DF1QP/51G8uW4FLLL._AC_SL1010_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2/RCIG1uJTWdBESeN6rJ4TkkbeDHrbG2GIe7t5BFnucT427X++fLOZXJRZQKU13zKsEUrsecFzLFbr8BvB/MjKiz/87CyATv9e3oH0rwD+k=\r\nx-amz-request-id: HC73KMGBNPSX0XJ4\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 02:20:51 GMT\r\nETag: \"933feffc6f87b5e835ebcefde5c5c67c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 8680fdf2f0e12092efe3d61a6df35efeeb6658f49e10a7397687c7f378021bd3\r\nx-amz-meta-s3b-last-modified: 20231029T132225Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 45111\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45111,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 499x956, components 3","md5":"933feffc6f87b5e835ebcefde5c5c67c","sha1":"b4961dc6b0b61aaf05cc9e4ffc4318eaaedd60a7","sha256":"8680fdf2f0e12092efe3d61a6df35efeeb6658f49e10a7397687c7f378021bd3","sha512":"1fe7f9b5dcfa651626616464fe7b1c25946eb77d2fb4d6739bb2cd9e9c5012feef50e8928dbc6ee5a125570949760b702b647bd4ed73ea7cde3b4cb853a45bf6","ssdeep":"768:ygg6D3BnJNDyRk1XT3cR1EHhRToTNw8sDd+TnRrJq/TEdjBxT1:y383hPSk53cRiraNw8sDy5dFx5","tlshash":"0113f1cb2eac3597f1ae313bf24150414b9aebd1a8b0da71752380441435b7f6de746e","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.069889Z","times_seen":2439,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":542,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/c5a63bc0-28ed-4a64-9e72-b58af5897c43.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-11/c5a63bc0-28ed-4a64-9e72-b58af5897c43.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: tSapTlo29TmA/Jza9ZcJoUT53dJvkAw3p9BE5Tn/RZ9y0e/seMviW2eR79JfWrs+FrIX9+C80Wyxprzpit6qFowRyFTwvHXD\r\nx-amz-request-id: HC75HK8G77A8JPQP\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:10 GMT\r\nETag: \"d85cdd88cbe7726f1f354bedbb0e0705\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 113686\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":113686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1258x1333, components 3","md5":"d85cdd88cbe7726f1f354bedbb0e0705","sha1":"99a01bf50cfb668fd087bf30fb597e44f542c8ad","sha256":"0dd206e3bf18b10a0aef408e1f7576894ea0e4b5a37098b3c13df3ca89622975","sha512":"15a88ef4e0751ba42bd64868162e830d7f7b37661438640dd9104ba9589f2595c531d4124d6f0bff37db1b0e44871eb91cc1f28dfd1f27975858bdb5bbb8d92f","ssdeep":"3072:6NE2h6L9TpBzUbO91POsKx/vQzh9wG3+V9BXEJ:6Nitd1PuxnQd9wsQ92J","tlshash":"43b312cadb8f23d1ed8b8179d60146b2735f27ea167863fa0b616d763a352c110cf458","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.810684Z","times_seen":7631,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-6f60fb4c.f9bcf067.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-6f60fb4c.f9bcf067.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1392-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1392), with no line terminators","md5":"41c67fa3f160511f0b6420ea29fcbdb4","sha1":"9b8d98551a5dcec008c09d87826c916b09e224ae","sha256":"a03ab3c0316b4322a65858548a8de7ea17321faa4c6b6d1ffc0b92e4a04c7acd","sha512":"282d17a7d4aaa4867dfefe616039a44980bbc65d674f2f5b7284c697f659ae7ed7f39aaa0ad8645096ffd6bf970827fd385bd902e561872cffc19deadd5f7d31","ssdeep":"","tlshash":"9621f7f66536926920bb702778a040e1b8acfffb54b2e2856e8f644dc476f412f33044","first_seen":"2024-02-11T18:17:20Z","last_seen":"2026-06-05T08:23:29.966788Z","times_seen":5361,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/208bfce2-9f5e-4564-9ff0-3f42b091c6e1.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/208bfce2-9f5e-4564-9ff0-3f42b091c6e1.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8GiHSVcDtFxAu/yOSV9fUDepXf6IfRQCGeU4Vz+1RENILrwQHBBXobfwrnTWLZvvpw33prEfElgSKBMh/4Hc9bHS22f5ULX8ddwKAQDXqlw=\r\nx-amz-request-id: VYRZ0H6BM617VAKC\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:36 GMT\r\nETag: \"1994307f8b89af5cfce1809d993ccd77\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 70775\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":70775,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1419x1500, components 3","md5":"1994307f8b89af5cfce1809d993ccd77","sha1":"18a1e5b438175e9c250289af987baf9737f6eef3","sha256":"6fcf1c0fd9d63f09ab28bb88303bf4a07948cf20d7f2ada3b98d61b1c72c58b0","sha512":"44130d3baa426c9c78b487f7afc1be7a2aadcead85221802a975bcafa48cf828ea9269b51fdcd1c738e0a7fc03138f3e25317668713641cd8e24bae3648ecdb4","ssdeep":"1536:T+d12/duTA94befwkF/rN77EpdChj5oBzirrX6cRg3AF0:yfLTAueIkF/rN0pdCYRerqcRg3Aa","tlshash":"f76302f370c11441cc64d5b2b68d32b423769356fc2fd30c469e7b5b628983566e3ca9","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.921492Z","times_seen":7216,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":771,"dns":0,"connect":0,"send":0,"wait":111,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /avatar/2023-03-15/e784c612-43a1-4248-92ca-68f8c7771479.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GDmpJ23WAUehF/Cbq5rxamGw1jtax9/AhEqUwkBEp1SARxGX5VvYEIs6XfOfgM9N66cqZlBidnFMs3bxlY02JoD4n5dxWhGGX/V/k+yUd44=\r\nx-amz-request-id: VYRT4PWVC3YCQ9GA\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"4fefd642d0ba649e2638d79aba1f06a9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 125293\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":125293,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"4fefd642d0ba649e2638d79aba1f06a9","sha1":"2804f3147c498add7926958e9fb5c6561df5c4af","sha256":"57f57a5716871604f452cfbbd9ccc5dddf928412ebd6c445cb85e3b79ff559e6","sha512":"2823160b04b81bfd3fd1c0984df0f804503ed8f26358a213b577013e17efaacdcd25079fb1671d37bfd55989e912ef69eb7b0268025cdf7be8cbaa2e9edd1aa3","ssdeep":"1536:Zle+qHAVjJGKWgL1u/BDsRc6EKkibdjbhL54OKzQSJaB7jvyvolZKAztq4CWw21u:ZBqgAyBuJwK6aqFwOEQScRqF01M1d1","tlshash":"5ac3120265245f0ee9afddb0b65f9be11ba6e8fc18f180937b39344441184da8f65db3","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-14T05:14:19.546397Z","times_seen":2519,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":840,"dns":0,"connect":0,"send":0,"wait":110,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-43f51806.0daa9b11.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-43f51806.0daa9b11.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1374-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1374), with no line terminators","md5":"7a0ea81bab09a5e259ac1884d3f72012","sha1":"d87441160241af9deea25169e8fb52a8537929e3","sha256":"b2217a779e1c0810181c9c1cc122bbd3ff1ce69d94164bf7b1e308cceb93e2c6","sha512":"a0d4c2bd68e73bc95ebe419ae4fa1a9210de9ff9e75bb7c3694bffa92fffb77dd7373bc7c3585ba1a9a67b9a3d0207afd87e34d630ba821177a70512c061bb98","ssdeep":"","tlshash":"e3215b00355e673edd37e67e64805abd6900e26bc453e227b9889405cecaa572813ed3","first_seen":"2024-02-19T23:01:30Z","last_seen":"2026-06-06T14:40:04.393299Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/index!download-url.action?lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/index!download-url.action?lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a560a9446044de633fc91e95ee889bb8","sha1":"f0a5500632ac941872cf872f2710f23a29460430","sha256":"9e3146e2ac34be6bc2af318cce8795e4ebd6f32ce2b3322fdee1309b39d2021a","sha512":"74c3e217cd64c4c211bb4f45260c30453902170405c1e63fbe33e19662aaf0001d68073b983594ceff07cba6e66d318c60e77893c91b0576ab97b2c8ad586ef4","ssdeep":"","tlshash":"90a02202230c080b0e0322c0e00c32000acf82030cc0eab0ce88afa2c0f88b30200832","first_seen":"2025-04-07T11:50:05.921761Z","last_seen":"2026-08-18T18:12:32.210689Z","times_seen":529,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp/B07XGP7HTW/81fwoaIeEOL._AC_SL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pc/gp/B07XGP7HTW/81fwoaIeEOL._AC_SL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6/h7wF/Zul52O26PZwaH1GOIWz1zyyj1hngEdmLoyHub8dYV+QkVBwnhFYUuFIdJVBqa47bJFeY8A4JLd/sPFVpWNyu4g+a9Aa/ooHxnY/U=\r\nx-amz-request-id: HC742M9XX12AGP4T\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 02:33:56 GMT\r\nETag: \"ddcaef2c6aac08fffa6008f8116d4863\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 805c8fc4de4d9c9903f475acad7422ecf82ac2ccf5bf0a442a1686d1f3fa2026\r\nx-amz-meta-s3b-last-modified: 20231026T130616Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 237068\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":237068,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 910x1500, components 3","md5":"ddcaef2c6aac08fffa6008f8116d4863","sha1":"5dfd62507f633aa81445a44811bb63809316c059","sha256":"805c8fc4de4d9c9903f475acad7422ecf82ac2ccf5bf0a442a1686d1f3fa2026","sha512":"95bef3e1700d32e6085d333d6564db07c4e9d6ca15f68db74153bfd184d8742022929332333565410ac220335e3cc373033aaedecbd28c5f7e9ac7fccc528d7e","ssdeep":"6144:p+zpCBaXboUhv83vTJMuOeo4q0l/l0yBsiaDkKhPbqTswCTh:p+pXboUhv8oe3lBBZcWoxh","tlshash":"933423f5eea10b8adb466b3489c02f21507e42e18d4dacb643f2e76245dd0d8d3ad672","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.09711Z","times_seen":2371,"resource_available":false,"data":null}},"time_used":1071,"timings":{"blocked":858,"dns":0,"connect":0,"send":0,"wait":114,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-356c00b0.3a3fd33a.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-356c00b0.3a3fd33a.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"5717-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5717,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5717), with no line terminators","md5":"e79c00cb7ca8983a851123ba2995282b","sha1":"d6439cbac31440161232b30bde84f72dace6f3f3","sha256":"1f395dbf216fac976c28ad9a5d7310f5fa0a4a58d6465be836fe493c7d9cda06","sha512":"96f881d710f575d2d4f87a2610d16c2b87fb5874dc4afda800ba5f175e57498e791ff40889a3e3bb4998df8738bab4f65f3f790ba6fe077954a434d181ee9d17","ssdeep":"96:GXz4UsG8OOOOOOOOOOOONaHYUt0bgCusCoG5YNDwTsoQiEbLGVk7AtWA2WyUfsXR:Iz5sbKYxgCtCowY2duLGm7AtmIfsXR","tlshash":"3ac14c7be839f03eb52615b9317819ceb814d806e1cd8775f748772cc4c30932b2925a","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-06-05T08:23:29.909974Z","times_seen":3235,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-2849664a.74508063.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-2849664a.74508063.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1166-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1158), with no line terminators","md5":"f69bda5e263caa21cd6b642796b22672","sha1":"4b2d8574dcb9ebf6fe6baf45c611d78bcc2b4948","sha256":"999664d13366150dff259a087ce41e79aa61005e86e85b5d5eba72e0698a486e","sha512":"908f01dbf3f1a5c9b6b67a99cb135f3709f5e9453a03fd7ace8ebcc0ca375d5850d62980d1ca2f2f9632bce11320f6fef7c7b5c521545b74e02c98ccfc854a17","ssdeep":"","tlshash":"1621f11360a2784d586e6441210e2174f4f09de64c1bece1a778c8f6d3b2d9a7a5f27d","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-11-08T09:49:22.22183Z","times_seen":778,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f2601622-74c2-44a6-bc3d-374575d12a95.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/f2601622-74c2-44a6-bc3d-374575d12a95.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1FUlDVwMZBz/rLENzd0CKjQZI2cJFijqcZX1uzZFp5IKeNq/iNtHsakEfvTsu8A4IM693E6Zd5H25wm801jHwxWmJy7QxustTgKy9ryDKlY=\r\nx-amz-request-id: VYRX9PZZ9PRCB7XQ\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:15 GMT\r\nETag: \"f383cfa9adc0f43a8d0f56f57daabda7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 99197\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":99197,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1177, components 3","md5":"f383cfa9adc0f43a8d0f56f57daabda7","sha1":"a2adc9d3b604386fee5ea6bb568c6e41c69e4dff","sha256":"2fc0a2e5ae1154c7db96eb4655ec0fcde8dffeb5a28805dce81a404fa5273b0f","sha512":"8c6abd4a504f6daa7777784dbb85ce326bc360eae817b37d632d238b62cbb0a53b5cb871ae153b6919d3a665ae7fa36c804e887a649efbe3889c9a854b2eee30","ssdeep":"1536:U4yqgb8EHMzbUJYXohxfnXAYEb1DHdEClNI6aTUtOE78yByKZmDwMuWxCUWgr/8D:Ujb8EH2ESW9n+E8NI6wpyEKZ71YCU38D","tlshash":"d2a31327dc05a180c5f514fb03eb8cbf0a6d1445b9ac985ebf06c9e27097a96cfd9512","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-05-17T03:11:11.744637Z","times_seen":2200,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":116,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-131c3a80.ba20e2b4.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-131c3a80.ba20e2b4.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"13671-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13663), with no line terminators","md5":"f2c9493dccc525d419164b9960d631a4","sha1":"b9d45f8e976c712426beba7696cfebd08808f89c","sha256":"3603c30392d4c1b63e65fe10870b4f887fff467db7f0312dc63f5de01771dfed","sha512":"833fff2751a04ce2f66e268d47b94190195bdc49d1af3a8ab540c841cb88a3b01adbfa0072e966212db97540c8c5b34be76e5cba3281f8494b155319db88569b","ssdeep":"192:+ZCje9tFJsHRpVuXmWKD1LtygXI/DSpFMOOr05xq/cictjAfNeNF/BPsGC4:1e7FJsHRpCQJRX+2pDXmmvPJ","tlshash":"245295e6c470a4bd495a81726045e1e0fb653a6cd102514efb7cec9a72ed428333e77e","first_seen":"2025-04-05T11:30:40.547479Z","last_seen":"2025-10-30T00:58:20.063263Z","times_seen":86,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/syspara!getSyspara.action?code=mall_max_goods_number_in_order\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"61ac163bbeb684523aeaa66caf6efc64","sha1":"c49a9f7247a34ec4c9e5f75ad21deb312b2fddd5","sha256":"2999b297980b24d7d0b2fb9f7245942a77df33163df540d618d63ae092c6f0a0","sha512":"d8c5b16c335a127695312497796baa41d5ed526b5266aff1b0c490574e4cdbc4136a56fcc4640f207268c18027da469522291cafe33ab0e3f2ce8cb89eb2faab","ssdeep":"","tlshash":"d0a012009c154c150c03c244a84d260641c8210246404e580d041928017d43c21000b0","first_seen":"2024-07-21T11:02:12Z","last_seen":"2026-08-19T04:10:00.386103Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/cc9f0c02-1a92-4528-8753-c155478fe852.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/cc9f0c02-1a92-4528-8753-c155478fe852.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rQjLwtv2Le1+W/0n+u9JboPb5lDCcShiTbn9ioTSJnBrL9nGDPcPgLUWbUWwOmIWl8iDGcRLJFmY/R8YYATkX+WWDq+btCqmuA6kqIfvbUI=\r\nx-amz-request-id: VYRGHF9Y4MMXHM9V\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:52 GMT\r\nETag: \"d858d55afc3e656ee3bfdf0a377589f5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 237188\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":237188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"d858d55afc3e656ee3bfdf0a377589f5","sha1":"4aad0028082baab839dcf77b15dbb1c1f8cd9cba","sha256":"d642984a117d89349a1406a829df5859a6bcb1c7e55241b7a647bb238b2be1f3","sha512":"9a866f4977ef98b217035df2cf4ca4383f76dfe6a0dd737d85eaabd162224ec671314e5daee299db0eb69e5878e39c2a968bad7c87afe639cd5ac9d4a88113d2","ssdeep":"6144:uS3CPdNMUSSNyTgJ8tQrxaym12NLF8acZXGlexMJnvglDJdc+:eNMUmsJ8yr0gxF8xl0eRDnc+","tlshash":"533423ce7254507401493ab0439c4feae7d2abc34a4863f9b85a4681edc996de7dcb33","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.868065Z","times_seen":6936,"resource_available":false,"data":null}},"time_used":1006,"timings":{"blocked":876,"dns":0,"connect":0,"send":0,"wait":124,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-21/c801d8c1-e6a6-45ed-b224-7f662cfe8c7f.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /avatar/2023-03-21/c801d8c1-e6a6-45ed-b224-7f662cfe8c7f.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NtJ9Au38Kb5+mMLiTWhsTD+/d+pgo7AjkG4Oh1+/Y99LlALMwnZfFORviRVUZVhLp5Sm6DUGz+IsvRkGMtKM6Gd0LX4KmCrLF5uJEfaaZhM=\r\nx-amz-request-id: VYRW21E8JPW82NWC\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"98adea8cd9a93873e272facab36ce8bd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 225836\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":225836,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1061, components 3","md5":"98adea8cd9a93873e272facab36ce8bd","sha1":"48dd6521b7244afb7a1777e110f50c3287dc4e9d","sha256":"90293c3926eafe78520d7bc77c4a7b6072405aa6bd3b04cea1bd0ad6cbe8b9ad","sha512":"653cc424fb3d413a6ad8a57855dd3d3871bad57032375ec11555bd8b2093bbf991322194c603b39951cce346945af2f44abe1374dd7c801ef707165f8ef621ff","ssdeep":"6144:7Ki0PNHJt4iiIyC/oB44/OXdXKUUn7qEoMQ:7sPftriAg4cCdX1i+N","tlshash":"80242371cefe1e8dcdaf1935d68a13c36e075d61a9a13b80cc66616469f10b33db098a","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-05-17T03:11:11.631012Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":947,"dns":0,"connect":0,"send":0,"wait":118,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/TikToklogo.bdd40d50.png","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/TikToklogo.bdd40d50.png HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"1321-1735398391000\"\r\nlast-modified: Sat, 28 Dec 2024 15:06:31 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"45e10f8dd225e4adbac3edb761a038e6","sha1":"2846707588ec462dbf969e8e593dd335c9776908","sha256":"4eb462f5f24dbe949c72ba59f6c53f70ce5f90cf2923695bd5ca1ee3522e9270","sha512":"3d63f7320698cb4b45cdbc9becc436b104ac611b3914af39f53fd1a2170989045f96f34746ff2e71e4896df16d555ae62311fbc43eae21ad9a05756f113068a2","ssdeep":"","tlshash":"842175ea78abf595c04a8670029111829d21ce8702791495f7e0ed184855bc8befbdf1","first_seen":"2025-04-01T11:12:06.932754Z","last_seen":"2025-10-30T00:58:20.065292Z","times_seen":86,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f70eeeb1-a83c-4724-bd3e-7c6dc72637c1.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/f70eeeb1-a83c-4724-bd3e-7c6dc72637c1.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: m8XnbjxVfKLQl6W5AgWCuG6c7r4FJgv8Gq/8Xv5vFQUaI3RXT93rflM7Lq4Aos1+B2HwGu7KGcb6io7xpnfnOY1nvHZ8lt3eVtyqB2AN9HQ=\r\nx-amz-request-id: HC7CXSFT729JBCCK\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:25 GMT\r\nETag: \"c37d660217f7d4c257006d2042c09e5e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 53094\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53094,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1326x1393, components 3","md5":"c37d660217f7d4c257006d2042c09e5e","sha1":"ea529657eb74db371f9a05e1c3d720cfd06c11ac","sha256":"ffe20fabb47fca3b0a55a877370f03f6168625efb804473ba88443d0e0513a38","sha512":"e7dea1d699abd674bf433eb4a6896fa8965b448b59361912ed8d587cfe4064471572162570a9080ecf0c20c21161b10507e386fc543116bd3a58e99b788f7a21","ssdeep":"1536:UYC4y9UKjX6lny922L7cDHc93ykbqdhVSbnm:U+kNwy9xfwcskyVInm","tlshash":"f933f18383a0e8d1f1cf6370402c9726e5cae52193f7c3939a1ece057575f997e52494","first_seen":"2024-02-11T04:26:45Z","last_seen":"2026-08-17T03:09:46.879223Z","times_seen":7676,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":634,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/60a1fbda-8b7a-4e10-8330-6b90300f8177.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/60a1fbda-8b7a-4e10-8330-6b90300f8177.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: lB6emiDmSAfpIGzMU6y69MjDZvYFkPZGNkqP+SQecskgkQrcDF9R+hirKCHR+mgkXG0uV0qlgCh04s/fg1ivqVi9M8M5MiffuP3U4ey1nJo=\r\nx-amz-request-id: HC743A30QAJTZ3BR\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:55 GMT\r\nETag: \"6c940aad2dc2544cd2897468bb9fd97e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 68214\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":68214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1402, components 3","md5":"6c940aad2dc2544cd2897468bb9fd97e","sha1":"f72f714028b0db42c1ceadeb3bc0778347189736","sha256":"830c5b0169830cac824ae8d0298c5072a7c9c3e1ee9842303d5999480581c0c7","sha512":"e72e299e873c5e0388d40d8d18826cf5ebe692ba77e5b690e971d83a9b09a19bfb971c15f340e0aa723d50348c1dec3fd3ba62e25d0d4391192a3021244ea183","ssdeep":"1536:0o2PzgSD6MwWin41mI5QZahL+96BlxtYjTa0Kb0of:WD6BV4xuaI92YjTZKQof","tlshash":"80630291e1b0c897e821c7ba60407063f565cfa9f550dacbf36a49a4b2a1f450f2ddd1","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.806037Z","times_seen":7527,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":651,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-04d0d3d4.ead9fbdf.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-04d0d3d4.ead9fbdf.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"7778-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7778,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7762), with no line terminators","md5":"83c22b1546fcd2e743153a9c402378d7","sha1":"23dddb4b008d101ca7c35fe826d72b12ad072c54","sha256":"ae2d710f83a94f802e0eed58dd0b266d8ec1ee7487be9f001f7096af2b62b3ad","sha512":"2d294a9600a039c120f37745af795224f669cb8240e88d48ed7dd1ffb281e91b719d87d0a369c5b419d1b97118b4f33ba0d15699bc486fdb82f2c51d89b9db20","ssdeep":"96:5fx+E6Ee08/8dv73tO2y5/Ifv6EECYIbWV10aAfHZsALb7iGB+T2GZG0/McEae2N:nw//w73UlIfy0YrVEaAGgrbb2","tlshash":"acf10b0a90035868cf5e5081a0297e38f4b53ed1b912dcdaf7b8ccf8d195aa5335ea7d","first_seen":"2024-07-21T11:22:37Z","last_seen":"2026-05-08T14:37:46.605122Z","times_seen":975,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-28/b95dc824-0d77-4013-a5b6-73fab1c9e4c5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TIiCZ/vE3bZCFCmL28QcaPK4Ys9cnRHhu77BAu+ZQW+8q9xXqSYEJKsQnqNToP9L6Ynf2xdPaJIgi36VlZqsEgQ23AkjrA3C\r\nx-amz-request-id: 76CQ33SAEZMXAESB\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:17 GMT\r\nETag: \"0527d1653d7ad2d9fce0c6e3e6ff3f8d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 17300\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":17300,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"0527d1653d7ad2d9fce0c6e3e6ff3f8d","sha1":"96f83c2be0860f8d33bda1e5955d2f69e1947cce","sha256":"91d6492646ed09c0cd914e6d6b5756d5e5ce01c44334b1e4fe035ead232a3f00","sha512":"a52945f8f23f05aedb2288cf6da590d9cacdeb9c07cda2e165f751c8f5eab3a752061e605e778f3c374481c4b1661d99be9d5fd8962d30e5cc3e4f5f007f2a61","ssdeep":"192:Gdel8vIA3KMvActt7vDzEu/L38lmmDOTORDpUcQws5kXMwAjdMubITDpgO67jTf:GdSnq/tt7vTLAnyO5skTAjGJTt67","tlshash":"ce7216179d089dd3616cc3e5bf060eec7f9a5758e8063def90a10fd93b206878d8946a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-19T00:56:35.791454Z","times_seen":9966,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-fe46833a.f2bd8913.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-fe46833a.f2bd8913.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: text/css\r\ncontent-length: 731\r\netag: W/\"731-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":731,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (731), with no line terminators","md5":"04fddaebcf220f89065a61a8972e9ff6","sha1":"a72aaad63f69552c1bfc2ce529d0934877a151a5","sha256":"fde628e3bf1d28a032a27b15fb82ee652f593c2de925664d244ef73294ca3002","sha512":"91283184ba4be03fc8613a4cb7476f38560ea9ce179e380e14c783b1dbd2a7b001596670057aca7a28aa80f63ff390a69ddada5e8730d7ec4ab353382952985b","ssdeep":"","tlshash":"b30128f3d1100422c1f7e617e1826898ff95ccb2e753c0afad92551d82caad70ba7b15","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.35256Z","times_seen":8466,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-ec5b203e.c88ddfb3.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-ec5b203e.c88ddfb3.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"5317-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5317,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5315), with no line terminators","md5":"e467108151a0178efb3f1559b3b3d89a","sha1":"b24c5b324d0df9ff9122d55d374a36c2ba001347","sha256":"a698238692edf2dd0fdde9588a354d21a1282480e83276b1c4ed66f9035291b0","sha512":"46477ad6e85904d656b5d8e15be0b0040b54416affb71ec445ce3108ae4f656628d782ff3098b5a43af5765bc786167199ee413fad3d67d0faa864ec9670acaf","ssdeep":"48:lD58YPTP0B0j+WWWgSu0+u4jQAF2GB2N5YDWVET/KtLS1gRSpDzwZSkVxUiFN7Yt:VX+WGsSBkLSoLVYIZ3mmJwQPit8F4aM","tlshash":"7db1d889b043a06cc55bb422310e7a75f4a62fb4f401989ef33ddce49994d14772ebb9","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.556186Z","times_seen":2516,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pachong/gaoqing/B07DWPTLJR/514KL6gAvYL._AC_SL1000_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pachong/gaoqing/B07DWPTLJR/514KL6gAvYL._AC_SL1000_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gFubRSZbu15rL9F1JjCc/9hM4TJMsvY6oObzPzwOK+0pUJ9VccV28hJxWKadZ7UbovOHZ2c+cF0uT9jFHExgB1iYKr5nNkR151Kb+NHSrlg=\r\nx-amz-request-id: HC7C9X70E01VSMBJ\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Tue, 21 May 2024 18:47:46 GMT\r\nETag: \"333bc9f8102abd9920062f747fd1aece\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 45252b2a7e6e7d31e4b51f95f215232c8cc5de8eb6d719a60ee4aa70022d8f70\r\nx-amz-meta-s3b-last-modified: 20230415T142418Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 30129\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":30129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 888x970, components 3","md5":"333bc9f8102abd9920062f747fd1aece","sha1":"e9e549efd4c0bff166582969196d4c48963d64c5","sha256":"45252b2a7e6e7d31e4b51f95f215232c8cc5de8eb6d719a60ee4aa70022d8f70","sha512":"c5b4682553f9430c4d889d864ea2c426e13264803531b8fe3781edadf67ef75dcb4b92a5f7b1e3f828cd768945dafb8746d7b0ca1fcaeefceb40a0fb2e16b600","ssdeep":"768:1rqMSN/4n00wwRelfNwPFdMOHhXhEM773zrWjYV0+aF16JO3j:sMSa0rwR6lwPFzhXhEgnrbVzaFkJ4j","tlshash":"fcd2e1b57b17c379e8b3217b8749638f9ed9cdb52126025f1149b9343c61d644cad8cc","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.8032Z","times_seen":7250,"resource_available":false,"data":null}},"time_used":1061,"timings":{"blocked":947,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-f43bced2.dbbbd5cc.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-f43bced2.dbbbd5cc.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"9713-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9713,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9679), with no line terminators","md5":"6538bb88d97a8c64c659278beffc0bc2","sha1":"0f0d75304ae3bfed56554f00f81a2abade861db8","sha256":"415b39112fb225a9a5d53c841e5bccc94c76a6e4b8d108f9a56407eeab3044e5","sha512":"2fce567f174bf5ae92678cf68f93f94ef00fe707eb9a61ee0625de2f42ba68bcd700d8204df78509a55d7ae690042faf711d9c2befd4c4f81c1ebf636bd33b8c","ssdeep":"192:bE6pgpvwC6acMPcaJ6VHPqSSC5DCkf5XdI6k:bbpgpvgqsHyIZ5k","tlshash":"6f12d9897b92f89e8b6721d4706fb417f19626207c0d16e2e238c8f63a68c1d6353736","first_seen":"2024-05-31T07:14:58Z","last_seen":"2026-06-03T23:39:34.582996Z","times_seen":2067,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/60bcf681-c939-4679-bde0-509eccd7574b.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/60bcf681-c939-4679-bde0-509eccd7574b.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cqg84JLiho5nPW2TF88mpaxh9QbHVPMmTE2n32a2xNoK3d+thAh/dogEsxOzpzqtMmt2umxwJaDpXGYUIRPYBvZu+avDqIcZ0WLMVGXjLWM=\r\nx-amz-request-id: HC73C86718BS41TH\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:56 GMT\r\nETag: \"ec86b66965224b96bab443b8410395d1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 146526\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":146526,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1306x1476, components 3","md5":"ec86b66965224b96bab443b8410395d1","sha1":"53b8c9b7a8a7aa82d70fd8b4ec6e3cdbd2ef37af","sha256":"4807823160aae195643949285d31c04cd2748742c243cf1ad55e04cf2c302d77","sha512":"ec04ffe990fc2220c95fd2ad387d62989ef863818ad9d26b0240b4c9130c95c537ad457b16d3e654302a2a07aabec6e6a9dd1b7a64fe613fa44e28e007accefe","ssdeep":"3072:4nGWpQdBtg6vmu+rXVV2xOxairAYONXsecAyFdBo8ZoWKv:iGWMmu+RVAYOPcAYtmWKv","tlshash":"5ce312526f51b006dbfa6c31b59ba629dc31a007a34398fb782d4638f8d73de7749281","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.916531Z","times_seen":7273,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":642,"dns":0,"connect":0,"send":0,"wait":122,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-68f12e90.5662d937.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-68f12e90.5662d937.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"17489-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17481), with no line terminators","md5":"86d04b389f413c1a3e43ead5810f90dc","sha1":"b473930891d00833490d2a6cff841669a050147d","sha256":"858b18630373ed8c26a1ca18b097f8506d0de5faefad52b1d53d16b9940ad4ec","sha512":"e73dc3aa2712d643deb855bb15bcde835f14d0b059efc12c83d89646b09958737fc3384198640c76ec717ec3861af0190a2ec2df1f0b3003dc0346989b0e4449","ssdeep":"192:AMkdDwLDPOAetuzhJgFjz9Y7zcqv0Q5zd0z4uzUhHYk8GHzYDckx30GUglxgl+/I:kq2QhJgFCcqvPo4uL+zwNHgyI","tlshash":"ad723b93760de44d4e3b65c5363e3966a2871924b008689bf37e9cfe128cc24355bb7a","first_seen":"2024-07-21T11:22:38Z","last_seen":"2026-05-08T14:37:46.624707Z","times_seen":1131,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d242b41f-a56b-4d36-86c6-d91b086f2e80.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/d242b41f-a56b-4d36-86c6-d91b086f2e80.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 52CqEUhIxz12lfueCtbp0Z2vk/SNlWmKtPINb4Q+71zrv4ks1spRXwVsBYPdQtf4Njiveq5DdBIrWf9W4XkPAMLw3wDbRkowzqDOcDvONPQ=\r\nx-amz-request-id: VYRR4G99A8J75MSC\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:04 GMT\r\nETag: \"9eaa232e9d3003f7a969175be379afca\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 97622\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":97622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1095x1077, components 3","md5":"9eaa232e9d3003f7a969175be379afca","sha1":"64d4d553fc1340b9d1e932e111c6059f03fdf5cd","sha256":"3219dde1f8200c3350e1a01e6d83e5840cf68f87e27e901ec9c77275021bef14","sha512":"f5d2569f4ec4273aa4872652759595e4f673ab811ea934cef5787a699b324dcdce5e08b3a0e01598109b1bca4fb9fb4d53924a622aa313cfb857a55c1aa4f18d","ssdeep":"1536:g3RruCk+XBAvF6JUyCUW1SBzuAN6dv4rhX2YKk2NY65QQ+nXjuFebpIrZlb4CjGj:ghru+RAvxyfW3i6p4rlXcY6aQ+nsUKlM","tlshash":"dc9302bb5ac94169c6cca33399254513fa58c0a621630dffba95db0b25dfa4039c39e3","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.822788Z","times_seen":7238,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":758,"dns":0,"connect":0,"send":0,"wait":142,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/47934c11-34a0-4990-9c8e-834a82f5b701.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: AVmw6oynLl+/3j9kttdBmBxmK9XzXt9oEwkpEgxnRmM0vmW41RNkF7vmdLM2fGR0C1dx5Cxa0NoBD26WT2gxW/QUIduILhqrzuu6dat8xB4=\r\nx-amz-request-id: VYRMDM0E73AXHZFB\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:02 GMT\r\nETag: \"8c00ff5e70d17f3ad0a9b1b85f0ca0d1\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 41631\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41631,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 647x1500, components 3","md5":"8c00ff5e70d17f3ad0a9b1b85f0ca0d1","sha1":"821b82e6b725f4a90aa36d51efc1a362e33b53cf","sha256":"41d72946e6b8fde800f2bb6b1ce9f6be2b286f437f1abdd23595a144bd5d1427","sha512":"7bbf0279cc137f96fd2c7a6976af80334de90ceda385bdd26da2215dc52f96f5fee9a68428c5883c7a2bf21755b6c01597c8aa9e40e971de13d550c31027793e","ssdeep":"768:1qE70EERqK41pSmdbAENaZKhNwJ/qdLbSY11ip73BTkEyF06n:770FNGQcbrMZGgCdVip73wB","tlshash":"f813f11b3b62a61ed1dbad36d45b72018ce0fb1b33c1848f6e62346135c6fd40b97695","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-15T19:17:09.05352Z","times_seen":2371,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":681,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/dc0af8d7-d6fd-4d17-b74c-2ed7629fdb8c.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-07/dc0af8d7-d6fd-4d17-b74c-2ed7629fdb8c.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: WJgCY+b+1ZjaaOZQzJhD0ssMzZN1gQLah1QQdSWv14M81vYXqNXByoathd/YbD6M7RhQWk8G5R8S5aKGh+zuT7a8q1QpItCL\r\nx-amz-request-id: HC75Q74FW6ZZQPZX\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:48:24 GMT\r\nETag: \"ceb0053e4ead213a14ea00bb6fd83059\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 250989\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":250989,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1481x1500, components 3","md5":"ceb0053e4ead213a14ea00bb6fd83059","sha1":"b8ef9c555d7d6b02ef1f4347d740e8d35f37b668","sha256":"526095a10d5399932f459a0f773a198e1f0284bad0ac07b3ea3a545ea9bc2ae4","sha512":"b7c084172560e2b54e8060dbc2e52f1c32f422e2ad89586666606ebf9a869900e6208847d5a32b1557ec33221519cd50202a0b04f312b1f29977a9b550f3dc43","ssdeep":"6144:n4rHhONC9vYZajSJGqLv1RSej6oHcieiO1cH:n4rQCpYghqLvCej6o8TigcH","tlshash":"f53413bffd159994ec0409383a2062e48b0c9fb91f66938595d8bbb42a14cf7dcf0267","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.905611Z","times_seen":6699,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":115,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/category!recommend.action?\u0026pageSize=50\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7436,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8a4ebb119a50060a0e01fb44e2dff29e","sha1":"4b254539b59f61b738c072a6afbbe4793351ef98","sha256":"db0507d8469606e31e38437d288b7ea5fc8652f369b048b8a7e247fd97d2c744","sha512":"b4127ab876bd72147f351ecb5875e9adbff4c8087f7377e02369cd50f0b1e3156b4061146c1a201605fead01cde85c287ef09245cdbc48804727261509c1bac1","ssdeep":"192:5VandzoHaIDsGJTN1o1xzvxVRbQKgDCU70NUbcxhYuI3PnU7xG60gkAxpHPUL4CU:5VeF4DBm1hvPQmU7YTxhKU7s60RAszUN","tlshash":"9ee174a9ffe83c6d4b8486d1168725cfe4a0e03b9fd70ec604fdde448aa676a057c164","first_seen":"2024-12-30T22:39:58.238079Z","last_seen":"2026-08-13T17:41:11.214737Z","times_seen":746,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/b07acf47-c478-464b-b17a-ba9226a7e00e.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: g9qXp/ytSgYfBu21AO51lF6DIhBLVIqpy5p0Tv5iVkgsbqRm+CmvY19iHDOKI6L7LwAUsZGkHCK5prAXOt9h5mF9d6qwV0hQ\r\nx-amz-request-id: 76CVFQM1NKPNYEPG\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"3cadf1789eb8f8d80a12e5ad0e19ea67\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 26582\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"3cadf1789eb8f8d80a12e5ad0e19ea67","sha1":"90a7bb2b2bf9588a95f5895d19564e8e0d7a1b01","sha256":"4a1e05ded030983d325fa2a293dffeb39ce70d4948634927f6752dfc6d2f1dbe","sha512":"9236112d6c6dad19ae6b463f258f73caf2470a6f375251a68b7a2f36df53573861a75fe032c86ce6494978e164f514ffcc85e2b20fd04896b014b9a038397a06","ssdeep":"384:G0IuovjpguMrZYtx3ebUIAN+sXub/t4fgq0i9Iun1k2ij4i71P68:G5uoLubd4Ub0AM24ecIGBiHc8","tlshash":"cfc2bf834a448f837859d3ab7f631c408fce49ad85d5b8df11e74243bba673a008e96d","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-19T00:56:35.843189Z","times_seen":9938,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/0289f107-7fb4-4016-bf41-00405c76db55.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/0289f107-7fb4-4016-bf41-00405c76db55.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: z4MNr/IWvLJxJa8mSULMy7YBOgTAExwVfSqBbTbvS4kPug8VgbJfRKXTFXPOrny1Ct2iqkmXyQIA22dEef4J7Yf0Fc+jQ7UowtvCD4Ygi+U=\r\nx-amz-request-id: VYRXS82W1MFRB6JP\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:46:29 GMT\r\nETag: \"5121c6c654da43d16cb203d4103181c2\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 118530\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":118530,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1000, components 3","md5":"5121c6c654da43d16cb203d4103181c2","sha1":"c7ed8e39d4ca57488ff21a40bfc82b068ec54604","sha256":"daf812c394f5200d1785c3f11f06f0ad0b804f44d0dfa5ff22ee173a7876af30","sha512":"f5e5f1138d0fdbf2cec1e2d24cd2db0d7803c6b0ab705f0a6eef97bfd982265aa7539f93849fdb78dd9204b147cb48f39bb9a27f1dd362afc5486d4869080542","ssdeep":"3072:ftP8FyN5Ff0bW6B7+Xzvjb/8sT1sjySOBS4:ft5Bp69A7z8sTKjFOA4","tlshash":"10c39d139906db97a41d86e4be071da82f076319e8c67dee11620e8f3e257339dde02d","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.871372Z","times_seen":6968,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":868,"dns":0,"connect":0,"send":0,"wait":147,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-21/0d5a21f1-ed79-4cc9-8779-240cb4bf5732.png","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /avatar/2023-03-21/0d5a21f1-ed79-4cc9-8779-240cb4bf5732.png HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ju2UoMHmU3qUUXTEcaoFuvobfNdztTTJDBOpVlzvSGXp/O8+LsOSFQdlHfgXbsd7FA73pxB5SpoZs1UGS4XM9NjU/YQL4MbzjXlwa4GR9hE=\r\nx-amz-request-id: VYRXQEKAC0MWVVAM\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"7175102fc4616889be030062b226e3a3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 67611\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 265 x 227, 8-bit/color RGB, non-interlaced","md5":"7175102fc4616889be030062b226e3a3","sha1":"be71c0c658b31579b771392f78bd595d79736263","sha256":"514fe41fbd4810bf3f4c32bf00fe1a52b3c8554155f35522f273d07e2efe573c","sha512":"d14997044494b712da27781a9d0cd05e21eee861e125c176c5a114cce3373f6ad0ffc0a25fc4f255b9f57119e8a67f812cfe332f5ee4ad249474f756b01b4d78","ssdeep":"1536:bHy816ssKdZahzOGNATlKjrL17FlmryIEbywHhUZ9gX1pjoJA9Rk7P:Dy816xKdOyGNATmp9TryDqdo+fmP","tlshash":"c263022203e5a5ff5bd28da8fefd4320648900be1d5d4d7ac642cec4bad7d26426897c","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.766337Z","times_seen":2306,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":845,"dns":0,"connect":0,"send":0,"wait":109,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-21/cbb27639-f9df-471d-a236-a05a2c188c74.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /avatar/2023-03-21/cbb27639-f9df-471d-a236-a05a2c188c74.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ELcsMZ3OE2s96kaRVNImzVipPDwNRBkETwaESZJnftXAk+HAjF9S9tXZNuYlKFUZgMUvx+TSDw3H2bpPGaDqoUMe/7jwKJ+GVGb9Rq9jwqc=\r\nx-amz-request-id: VYRK8B4G8PEZ14BY\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"cba16cae5f38f165c609e2f5ab5c18fa\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 56159\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56159,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 800x534, components 3","md5":"cba16cae5f38f165c609e2f5ab5c18fa","sha1":"98e1d7dee3cacce9a7dc0e27f902a770bcf15950","sha256":"3b548b41819c9f67d5d76472dff0b09b0675de098e558eaf78f292b1a8c79d8a","sha512":"b761e1b78ea5bc6b5a4b5d8b4c747c5cfad74c4ae9973bb5ddad0c5b24fcd0765eedad07593d7a9130167ab0241073f3553ff0b10b66d5228979dfc3146b04dd","ssdeep":"768:uDZKKnijpLxWGUlbk+S68BLV750fOQE9UTzssKcclL/xNqKyvGw5KazAr4jNsuP0:uFXnwLdUadz0fpCHcI7jy+w5hzquPzyJ","tlshash":"06430192fa07a827d6d48ace5c2ec88175185ef006f5eea635ec4ecec7c0047b9517b2","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.863865Z","times_seen":1888,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":947,"dns":0,"connect":0,"send":0,"wait":110,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-2d216070.3352ea75.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-2d216070.3352ea75.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 371\r\netag: W/\"371-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (371), with no line terminators","md5":"ce40f2a4193b5a30d49a76661a6d491c","sha1":"f5e483725aa903c2bf3fe7e985998b406958f839","sha256":"ecd84f0f9a121543ac8a9c2f6aa7d4b3c31b885f21bb43632635321634c792cb","sha512":"526f58b1ea3a88bec71d67882310989b8f4e6534b2018c8fc699239a2da7ccccd94c14b79e136e85e9f0b8118b542b4d00a8cc1cf969ef5c3e552a80048b72dd","ssdeep":"","tlshash":"10e0c0782063bebd536c30cf237f5993c45b1c090ed754e51ed0d49a623651f4224b99","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.646954Z","times_seen":3778,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-4a688b54.bcabc3cd.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-4a688b54.bcabc3cd.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11662-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11620), with no line terminators","md5":"b3e9f47ce8baca55cdaa8f4df30a6f15","sha1":"46e33747e6e5d99a02bd07d07c26ddfaf9f306e1","sha256":"3df74cae778a7f8f20b83339fab5bdb5ea0948ecc936231c2e39cee0310f2f99","sha512":"7d392b3653ef39a5f39def871e81a8e094f9046c9e0158b0e6dae858f43ed20f8f60770442c3bed13c0719220bc9e4fadbcc48e3b1efc4b16134dbaa4d097954","ssdeep":"192:CBo3gweyB73GmgA4Whyd7BaSLZ7HchkBv6vDSs:n5eo72xWoIgs","tlshash":"1532d74c7293f89d09a350b0605fb907f1a96a5138099696f3b4caf539bcd0e6326f3d","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.493729Z","times_seen":1703,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-6699a1ea.a7ad0cff.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-6699a1ea.a7ad0cff.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3692-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3692,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3688), with no line terminators","md5":"d9246805257caee7e56e58d586fde1ec","sha1":"7deab1aee796fdfb9f2c5036b31ea84ab59d6833","sha256":"d1bd04564b0c20c35f152289163336e5fd697a6cd7409c5ca56d5aadbf9ab480","sha512":"669eb7e4b821ad5992d5db949dacf9077608eda8917608a2f4d56e8374fcf7c26fa0f66b664ea013e340ac2ecc7c7773dca0af803cdb97b14d8ecb440ce7ebe8","ssdeep":"","tlshash":"f3715546412179ed8bb9115231a86024f1f109dc680dac92eebcecf963e487c6b6d3fd","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.6421Z","times_seen":2860,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/vendors~app.35d8944c.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:25.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/vendors~app.35d8944c.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"248173-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248173,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7739722848fc1803f8afea0e50e3ceba","sha1":"4d679fb1a6e8e4295873b410b2fd6fe85dc5b58f","sha256":"f31c2497c2dedb833ed17ff0ddb9fc3242dc5fcb25b429c81065a76e33e742a6","sha512":"888372c798f45cb52382017e9ffb4ef30f371819f4b6799003e50b7ab70367ca6cb01b12b3a53c449e28005789db84404ee7e917f81e0f8d404198b6e400ce11","ssdeep":"1536:t28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehG:WtKw/27eDLL6ob6v7f65WCXkb","tlshash":"8b34b6109b17203bb22bda6d74d0ba892f25c313d8334b7afe95790cc6d64991263e5f","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-08-14T05:10:09.646986Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/908e2a95-723f-40aa-ac29-581a9ee153f5.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: k2Hqi5c91uRyPV6wSQv1MzVBvHMMWdCSI8ruXHdNHyzYf5aakTd0iBbhhJx4+9I3BjbhLTuob+MTYJgJzAKDQN5QQ8iRpIHN8/Wu6AzdKZM=\r\nx-amz-request-id: VYRRXBEXNKYNCC8G\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:40 GMT\r\nETag: \"c5a47705795cdbc1e8729597ae3590c0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 116736\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116736,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x890, components 3","md5":"c5a47705795cdbc1e8729597ae3590c0","sha1":"dc331981dd3aeb0e2ef49a5339b9de6fc874a6b1","sha256":"2c4fb62978884f281072fa2aac50acd32f422cd139a6e8c703c644263f3cfefe","sha512":"64b217eb462365a15e408992e9f6cafc4da3aeff8be47a4a0d9cf1eec22ae84b8c49db9e0bde58eeb4c3218d3503147fa72fb222e07dd10f09e08108934f491c","ssdeep":"3072:5e2yg9EXZZEXO06Ae3UYn/HFkdOQRC+p/o:ZyeEXmO06AuUYnNkkQRC+p/o","tlshash":"82b313ed627148c6e96c04b5587ec05c8a31138bb6d8af6f30fe1d221bcda512edf549","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-15T19:17:09.058792Z","times_seen":2437,"resource_available":false,"data":null}},"time_used":766,"timings":{"blocked":647,"dns":0,"connect":0,"send":0,"wait":116,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/74320950-831e-4dbb-887e-09fbc2c1b501.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /2jNnsTnG4+X3UKLI1TclJTDktmOX760UqDMO8RIJV+Pg8NdYwmwKaQSsMfFo4iuVLXQZ8kc8uuQdjnQzra0tJ81bzfJIBxAu/4k17FTVO0=\r\nx-amz-request-id: VYRHDJYFV97SB1CV\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:50:38 GMT\r\nETag: \"755beb0acc47fd21e538c3b25359b060\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138697\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138697,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"755beb0acc47fd21e538c3b25359b060","sha1":"3ea9d8c04dc9f72448f2b72802065cca80a98b53","sha256":"9636ca3c7079d5e57d692b66104fd9c53854c54b9c074dc79c974d52fab6fc82","sha512":"9239457347dd2cc3f21401f59280fa233cf0f74d4d47415112e3666210e07410fabee8fd06346880890d5a0fa1211e3d2754bf6c7b83e7fd23e83d8af70cf2d6","ssdeep":"3072:EYIZstVjQOeoAYzeufLqX99sd9JGjY96eDdlswyo102lnkS:ELuBkoAYaKqX99sd9JDQeDd+wPnB","tlshash":"4ad3120e32b8b5bdeded11f0b19970bbbef5e15a4a830e4e1e8b650a57358457c4320e","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-15T19:17:09.10937Z","times_seen":2352,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":123,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-ec5b203e.45f75ffc.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-ec5b203e.45f75ffc.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"4759-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4759,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4759), with no line terminators","md5":"50b67c1e36297b1843f24dadece451cb","sha1":"aab4395d6d74d3e50d7016a544f7709a601343a2","sha256":"6310619d584f66c72ad89a3e491fcd0100f459bbb6c9d49d92843f464fcf51d5","sha512":"4dfc42a95a7a19d045ca233519f6f1c6fbd5446b344a059b1a5f691e916a5191b0121a7ba61619722cb7989a175982917bdf4e6359cfa4920d9f1e4b3ae2f29b","ssdeep":"96:2oxsUQOwXVcjglPJiA8J+eCkGCaCR4CRjpClCucCOCTpCHC9C3C9CtACbCUCtCcJ:2oxsUQOwXVcjQPJiA80eCkGCaCqCTClX","tlshash":"35a11297311f133d68b7e1571981a86d7878efc2c1322211fc27aa18c8db6977a3724d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.336196Z","times_seen":5412,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-24e95abb.4ac64a9e.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-24e95abb.4ac64a9e.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 830\r\netag: W/\"830-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (830), with no line terminators","md5":"fe8a919ba710b88c27be2a80cb1fce74","sha1":"ef7bdc5ea44742d40a0b67d268b4d6d5f939eb20","sha256":"c90ecd0bc9ca74176159703f5a00b82bb0b3b8e9381baf84aa98aa1fc6362700","sha512":"dce714b3e6ddd878da269a4088b61fcefd33a6dd3eea3d91df380dada97c8b7313085fd0e0c57fc53ccdccf3505c034325f4719507c10599cfff76937b74122b","ssdeep":"","tlshash":"55016b5c79e1b44b0a4a78f5812f55d6616b24bd19eeb813eaf090d45f30cad113aecc","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-03T23:39:34.477324Z","times_seen":3897,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=2\u0026pageSize=24\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147348,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4b40cd9f542f5e6693fecec8aec27b88","sha1":"929c3447319fc2a7d5cec2e6608c19cee788967d","sha256":"e01305fef4c3c27bb8c838abaa7d24b7f142ee122f8f9652769fbd5038e46de7","sha512":"1f30c3fab54af5d4e2ec172b13223238492742ebb6489738e04dd0b9589bc6edb3857e163b18e6a4ebf665fd0f29ccebbcf47bd36473af56ab044e4c2fd7f863","ssdeep":"3072:tx1uzdIgLj1WJU4Z2VaZc0b7zHrvyAgwPQs6Z7ubRs4bsREq:o5Pf4b7vLEpCvq","tlshash":"92e3e852d7a8d26a1e28015544227eae94fdc217dfb34f88ed2cde34af98cf6761904c","first_seen":"2025-10-30T00:35:14.576709Z","last_seen":"2025-10-30T00:58:20.079212Z","times_seen":3,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-08-14/29e5a33a-f02d-43f6-b4ce-5edb8be1577a.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 06azi2vHKJLDDg/znEfNhaeMBpTqVhF6AN2iBRc0hIf0rLd88U+uJ6g0BLiNAsASUTDcTTkOuJNIjtbiFaXW0A9823JbWs+y\r\nx-amz-request-id: HC7A7DDN1NHWRHJW\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:35 GMT\r\nETag: \"a7d470fbe103fb9a6784c6e3bd450ccc\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96012\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 500x500, components 3","md5":"a7d470fbe103fb9a6784c6e3bd450ccc","sha1":"cef53fa7fec6b069bc298b96adc02886d48a2bd6","sha256":"4529834992120ae959682d5dfc40e76a46db199fdbe4b20fd77e5d1ce92accd0","sha512":"e429d8efffecef5f79cbdab092f84a5054126fb33ee4b22d8e50861cba8d10edc49b41b5d0b8d02d997428b0f661816cca586b58f15d10cab9629375de8ff737","ssdeep":"1536:Kvlkpltm3DoZ3IUr1vvliVOHylrocmmIqeWJ6BHlCJsSEBT+qScNiHoDqlSBvP:Kvl2tm3DotIUrxtiVaylroc0dPHQJlsZ","tlshash":"1f93f19fdd0acc318b46e0ea7a85c1a364b9c25354d0f97f5739d8b6c09c7b99802cc9","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-19T02:14:12.479287Z","times_seen":9671,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":634,"dns":0,"connect":0,"send":0,"wait":117,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-2d7a155f.8ed28816.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-2d7a155f.8ed28816.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"27717-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27717,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27675), with no line terminators","md5":"7d5f9c003cbab39b08fdd6d9b55f22fa","sha1":"12eb54c7ab5da64a8726459ecca5501049044838","sha256":"63a267d3bcfbb71615b6c6695466bd8234e204e9c6a43c214a5376a6e34fedf7","sha512":"79bfa19cce2bf1882f8861748f0e9685298f59b6400ccfeef02dc25d2c6eea093d5d082f942a32d6cbe9d7ec3064660da3f7e4e7154bf60ffc708de7f86fc52f","ssdeep":"384:PFJ1G5vSAJRx5WaveIA6WwQDPqtjcg5BNK6lRguvwwOO0qb2s:PFJ1G5vSaWieT5p7q1NK6lRguvhOOws","tlshash":"25c2f81a3286242849631fa453df4b09f33261d564264988f3ada1c76f7cd6e31bbb7c","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.60638Z","times_seen":1735,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-377c362c.160895dd.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-377c362c.160895dd.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"7108-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7108,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7108), with no line terminators","md5":"1d9c352eeb2df054f4813db4b938d75f","sha1":"0d9e4c81e1b24c286c4f57693b8a9bc93477b1fc","sha256":"2ba81ccd7b3283e776c90b4cf37f738076b9f4f233a52039bbb972d74e2e1c84","sha512":"94d55fe1696175c30d67902aeba25a8868968aea3fd8aef7bbcfeb33a21f6cca8fe99abec9b76d90781366e0af1c86109af3ab206059d0944ef92e54dbcae6f3","ssdeep":"96:GXz4UsG8OOOOOOOOOOOONaHYUt0bgCusCoG5YNDwTsoQiEbLGVk7AtWA2WyUfSWf:Iz5sbKYxgCtCowY2duLGm7AtmIfSBX2","tlshash":"bce109f6b036e129b77be6b931b069e97410e902ecc683e9b644762cccc3693165274d","first_seen":"2024-07-21T11:21:33Z","last_seen":"2026-06-05T08:23:29.928556Z","times_seen":1859,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/304ce03b-5dd7-4e7f-a074-7d7c71886fb0.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/304ce03b-5dd7-4e7f-a074-7d7c71886fb0.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: plWw1iN44Xr/u26N1xdpIWL72hG+e3MRy7Lzdu9tNhTERvx+k6E2HgktYHyWgkvSZLKyNqLE+EAIhNoeuykd83yF32OwPF+/MknehLmk6U4=\r\nx-amz-request-id: VYRZ8887Q9G3H74Y\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:11 GMT\r\nETag: \"a3fdf184d72fcd6264f3e56d08724060\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 55808\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":55808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 594x745, components 3","md5":"a3fdf184d72fcd6264f3e56d08724060","sha1":"44b803a692f1d5a4ceaa59481d693e1af0493826","sha256":"804ba7da443132d09e928652b04212b8481c8da88e893fe4b7a76a4771e9deaa","sha512":"aa6d53262762a2593f8116f30c265ceda536a839a0bbe103d2c74e0d2e5d7377b4b57e49127a97e371faa4edfcdd114bf615536dca4545d1ca9ee03cfb8e05ed","ssdeep":"1536:8ief0738AoLCzSNcSHs5PFajgsARfcA/U/qLFa5R:zgYzSXoPF0gsARfcaLyR","tlshash":"1543f21eb368dec9c3f68dcc483ead85788cf4392bd30b19558316a3d09e9ea8579161","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.783812Z","times_seen":6872,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":850,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-637414aa.1242e09c.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-637414aa.1242e09c.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1966-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1966), with no line terminators","md5":"b392d111326094fde89233745e35305c","sha1":"6cfd33a21fd46b68dbca97360265c9ad85c27050","sha256":"bd8cbb3e8f8ff09d693d74330ea73ec6d5b16692790eb8fcca8894095f0925c7","sha512":"1a69336fecc71de19b823feaac4f937f23f81cca5967d360699b33dc5bfb8e5f38bdef99deee78c878c2f3c49934fa06598da13cb812cb93016c7ec4c7842b28","ssdeep":"","tlshash":"964185df54a7fcad97dbb04210291035b0623ec6444a8ca57bf4ce6085d4d545f1e69f","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.564704Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=0\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141880,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3b6eb9aee8370d94bb3662118f9dc84e","sha1":"81aeb4b50fe99d1032f6a3049965216c8cd059cd","sha256":"68cdaf3f0fb4345ea42a0e7dc7db8c0409a23b9f504a0815004800ede0f1f1e9","sha512":"467dfcde44982fa886c28f922c9367625fd79055b9de89cbe86999d521435cf36796a2e67e7e2b80951f3393a5fca6e36f1943878652805d9f00852bb80ba8e8","ssdeep":"3072:38HTg3qf/4Hixa+k73qAhnixYumCPSaxoyyjS+sP0Kg/+ogm8q8c:N8WPiRqx","tlshash":"29d3e953c79881350f6401a544173bae94fd821baf734f95ae3cee387aac8f6766508c","first_seen":"2025-10-24T04:53:50.573565Z","last_seen":"2025-10-30T00:58:20.083378Z","times_seen":8,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/1bf64a41-5716-4bfb-9f3d-dad3bbd57850.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/1bf64a41-5716-4bfb-9f3d-dad3bbd57850.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 2CGuO19tlUeI38Ir6uX1iV++FVjO96hWcv2uOuyuWD94f0DVWRGn+mYY4LnY+M54BH8ubHOw7pvqaJhwGwDWMS2YAhXQkxZmjU+h2C5OmtA=\r\nx-amz-request-id: VYRHHJSW485CMCQ9\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:26 GMT\r\nETag: \"7443614779454cc0a775aeaaa0617173\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 156716\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156716,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1431, components 3","md5":"7443614779454cc0a775aeaaa0617173","sha1":"9ccf2b06ef2d4142709adfd982b64ac0fb259628","sha256":"c820e8cd027c822920b9c59d92e54d107bd10c818e943166d5d5cfd1300bf620","sha512":"f6f53c63141cfcec7a2c77e97dd665fc93d61082607e25ef4e06dbf70de0674b9fec42bbc9056269df298a985755b4bc4d778a2aa94acc15a52da7b9aed4fc9a","ssdeep":"3072:xFLUQwZbVMhPZovwmXbFacwZHIjhunvRy+q2yVLZalHTMZOmB9vqDk+fH2K/Vo4:rLrwXSPZ0wmg1ZHIj8QnJim9vqDLWul","tlshash":"f4e312f6439bc6dbd4a926b6646eced3375100b24f5a84e30812330558c3ba677e397a","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.846662Z","times_seen":6831,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":962,"dns":0,"connect":0,"send":0,"wait":112,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-4007d5e3.3ecf88fe.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-4007d5e3.3ecf88fe.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3338-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3338,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3338), with no line terminators","md5":"1bc5b8235f9e8d5bf3961279423cf630","sha1":"466627105df20f8e829d3db72a2617802b7b265a","sha256":"cc7c2d00d52891b7af0ae290785d54f087c4f61951893b7c7fd8c869f7a8047f","sha512":"a2c17506a8e46344978b7955c1c162a6fdb844d0ec51fce021c04aee33df5d44cae64f10a7a6bf5ec295a1210540e5b82c1f7e79b9d89aa14dc29e7531cd81ca","ssdeep":"","tlshash":"766110382130361c3b37922a25c8f54e2619a9e5f18995c9ba98c42f4edf769dcb0263","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.508224Z","times_seen":6672,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/3cba5c51-596c-43b4-bb0f-801b2551a36f.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/3cba5c51-596c-43b4-bb0f-801b2551a36f.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NAMitUrUTjfSRQw7SydJa+b0MZPQprk0HjSkJQmVLqSHOIKPFweZmNRO6vjKA8HlNeEHtEwtAJ9aNb451B09BHuSES0GjqnRzou8E9UiPTc=\r\nx-amz-request-id: HC7558JST4XSTTS6\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:38 GMT\r\nETag: \"d08309c8a906abec10902eb9239abe8c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 96181\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":96181,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1339x726, components 3","md5":"d08309c8a906abec10902eb9239abe8c","sha1":"aeda5384b198a7af5ef2e0b674dee8b5c8e9cd19","sha256":"56c0b42a383410b485eea554fc8466494ff737bb0ba87173a3d96078572e767c","sha512":"4a5eed14cffc98e81ee7c0c244ecd0b818e296d0f91384b50f84f6eaba25c4e0d9377123d66cf882eac33ff1cba8abe1666fc2b9be26d2d36bb5f45176b44f66","ssdeep":"1536:8187L7QI5Bqn/gHbTCESOzFpIqtIhH5v9TKWs73I4m7dR34F9ncu:j7QISInlppItH5lu3Gx1WCu","tlshash":"229312964b888a58c07c2a7e84ce130fb9b1ff14b511724b9bc116b87fb74da98ddc51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.108295Z","times_seen":2488,"resource_available":false,"data":null}},"time_used":1434,"timings":{"blocked":553,"dns":3,"connect":94,"send":0,"wait":121,"receive":190,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/b36d2777-fff7-4cec-b168-5b68c3d256b6.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-07/b36d2777-fff7-4cec-b168-5b68c3d256b6.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GNM+IHKeS3nSjkZqkO1PeW+Stb1iOzYLInxmUMkOCR7SqTQFdZjNmxi0qSIeVByVozSrYbPv+EywmaGAXWW/9oTuhjJO2CsM\r\nx-amz-request-id: HC731SYJD8FPAWV6\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:47:52 GMT\r\nETag: \"2cc7debe43917ab58c294485e5c478d5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 235022\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":235022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 981x1500, components 3","md5":"2cc7debe43917ab58c294485e5c478d5","sha1":"1dcb28255d99596d828673da4d474ff999c98905","sha256":"590d7d4cd7f3fa7833565c83bbae73b56e3fc935cfec091c542e28de866d7d5c","sha512":"71f23f15d8d9054cfce9632c25b2f60aa724b043c2a1d3d4e2032123ba89c99e6c404072d0b2baf3ea13240ff17cbb10942be64ebfd0c5499bdcd82f8eefe381","ssdeep":"6144:kPr1Ds5uJHQbwgOYbprdGn0CUmmqtHFCmH:21DDJHQsgR9pw0CUmFCmH","tlshash":"3134239d3608364dc7685bba017bba565e6cf58048cb7bfa197f3e07199311e61e2430","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.825346Z","times_seen":7599,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-2849664a.b30d78dd.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-2849664a.b30d78dd.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 340\r\netag: W/\"340-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"7de78efe8bf09e10f280567a395d6b1b","sha1":"a84403256fb9c265c757c632def2bf3681d921e3","sha256":"3c64df4c1120ae8af09b2670ec78de64165c17cfe281e9fd19d9a55277f38b77","sha512":"575e2e01d3b715fc66a4de91cbe6cde658c2d3953445a92f711f396196fe921f1ff198fa691271c8670688cac8b445a52076248bc01382ffdd4b6956c1137eb5","ssdeep":"","tlshash":"f6e020708b561089952be1438b034cda2af9e663d16395855fa3d03dd46704f2e2a785","first_seen":"2024-02-11T04:26:48Z","last_seen":"2026-06-06T14:40:04.395716Z","times_seen":7633,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-3bd464d9.62423191.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-3bd464d9.62423191.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"11682-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11682,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11682), with no line terminators","md5":"120401b77759b3ce12f2271caf25629b","sha1":"07395e3eb230eac8556aaa6b7329453a2e381ebb","sha256":"06cda3ee5e327bbb5559da11da9f7fc9fe49bace6166bfd59e6b8c40a6c6245d","sha512":"5d7a75a51ba1e196eafcc2499f5ca21f322e8bccfe2950de9f8b1833f699452fbae7938dcecb37b24bedb493e39f9fe0e2b9a194b971f79f528a0042353f3d36","ssdeep":"192:l33sODCMSXc6xJ6gCA95PR906An/fs5d24uiYFG+SVj+4celm:lnsAKXjxOMHa3EzEGj5+4ceE","tlshash":"6332f80eb0bae6bc889b00213016637475757bd5f00849d9b3fcdce85549ea4272b73d","first_seen":"2024-08-01T01:01:28Z","last_seen":"2025-11-08T09:49:22.198235Z","times_seen":489,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/30b476d2-2a51-4c17-a8b4-b57d7df5f00e.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/30b476d2-2a51-4c17-a8b4-b57d7df5f00e.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iI54CgCR3/YSlkY8tteKJCQvLDyFU07BpfUvcyIgel1NcghKDYLw/dk6bFjCOpi32hfceafpCUoM+ce1jiyKqIEER3K+5gvoru1s+pUUCVg=\r\nx-amz-request-id: VYRJMDRXZRY3J3MH\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:12 GMT\r\nETag: \"fde0c1aa02cceddb35ad54b683fbf143\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 66684\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66684,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1488x1483, components 3","md5":"fde0c1aa02cceddb35ad54b683fbf143","sha1":"c3f958df892d41c2f9725f70e833c342b0f67f01","sha256":"d21cf0f51f8a537018d4a53b1962ff0c6fde6f637f9fa448f50c60671809c182","sha512":"928ce0eed52eba6e9d64fc73b85fc8f9955eef1f2c122a6df23046d51ad1600e8dad39faa4c07b541033473ed98f6bce2b34a128af735a0f9250a93bdba52930","ssdeep":"1536:CZA9B3wU98oG3+rPg2E0IpEtJVv+iiUB5BgnRVO:qAz3d9fRrYhpEtJVvQyUK","tlshash":"be5302c54b4da98fc3fe13b4611ad9738f82586ff325a84a11458f64613bc662e80cfe","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.840616Z","times_seen":6799,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":882,"dns":0,"connect":0,"send":0,"wait":112,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-6699a1ea.cd704402.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-6699a1ea.cd704402.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1252-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1252), with no line terminators","md5":"b50aad23d365ccde72e78b8313b4e7c2","sha1":"82e1ed3080ed69d8b4384e17044cdcf837769a03","sha256":"e36128c4817614792876d24a43ab454dd8cdd52f66965bb00f14406da9011f3c","sha512":"3929980e42defe71e881ffa97bf69c5d70251a4adf0eaabc203dc87188f3d9da61887ecf8f793b9c6a2861a6b24484417bd3adc1cd46a41cf2a0f14082f92dd7","ssdeep":"","tlshash":"3f21ee67b51163ada3bb689413b29c8c7414c840f5ebebfae906411dc7c72973691388","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.522312Z","times_seen":7301,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/2df406e9-dc70-492e-a7d5-4db89889fe58.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: I5l8NaeHGK8L1J1ve3DwP/w3WaVXjg9vO9MjpXv6jZ0Ql4mapgBxryzeEZ7C2ZEAbMZpNeSWW+Cb0Xd6Iw6BPFlvLmJvK6Ye\r\nx-amz-request-id: 76CZ9KMVC5NRQ4YA\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"882acb8a590986400f716b14ce87dbd7\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 27557\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27557,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"882acb8a590986400f716b14ce87dbd7","sha1":"69d9585cebff24ca05746278353d9723ac581960","sha256":"1c488a620a2342179fea9b5325ea4b5e0e450de64f3bc3383c67e3040242d1e0","sha512":"21cc314fbc6d011adc782475102dcc061e67ed01e1162a9046700b1375b1841701831af77286cc0fead58c997eeba79f5e1d141cdb124ed7881fbe71315c65a6","ssdeep":"768:GG5AJy9ToRwVbgiqHgdBAe9u4p58OsHIE7W6lWG:GGis9sRwVbgiBdieWHTlWG","tlshash":"40c27c039c854ad3b575c391ff468f6d3b8aaf08fc5672e710e11eda37a01424c9da6a","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-18T19:52:02.308655Z","times_seen":10096,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":415,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/fd370537-bc59-4d31-a9c8-e7bbfebb9c9f.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8qrHDyj+h6+IatBbnmRzdjICARw6+cWiC8KtazlJSfvcANfoTrDmogiZ7d+VCtqta2ndlyYmZQQ70jORBqdwuqqmvpW05xts\r\nx-amz-request-id: 76CX7MNE3M7SMEWZ\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:19 GMT\r\nETag: \"87706f749b341f09c0d4f313a08fc43e\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 29992\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"87706f749b341f09c0d4f313a08fc43e","sha1":"1509845938ec37024267488237d11e718cde9f13","sha256":"b7fe2721d939005c3d167ba39f1512ee5ba880a08fe370ab93dab990ff0a914f","sha512":"862ad1c48221a29e8fbeeef1be46b06d77617afd44de9e63598e0f746aa0277ef3c79366454df627aa6c12f465440d729d9157ba768922c90a574439df2d195c","ssdeep":"768:Gv6RenUljXtCiU+uKMHNDBp56HJJg0+Fz7P:GVnUlJFiuJ6FfP","tlshash":"67d2ad27aa50afd7b448d7a2ff030d862fda522c41d439de81d76b436b18b77480d1ad","first_seen":"2023-11-07T02:37:43Z","last_seen":"2026-08-18T19:52:02.18856Z","times_seen":9967,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":421,"dns":0,"connect":0,"send":0,"wait":112,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/d9a4f743-88c7-49d5-8f27-acd79169d134.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qeQkjbXIh9csAt/aknnowZ4/Atkw7ReWKCP2EC4d7Fjq5qWRvQnCL4eNkCY1FJqJS75sxlWmlHxT7VOWJnoc71REBgl/epFOZpk6GuTS/q4=\r\nx-amz-request-id: VYRXRBXWV8KETRZK\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:54:21 GMT\r\nETag: \"5eb7c18e0164431bc4ebd5432142d478\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 62006\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":62006,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 992x798, components 3","md5":"5eb7c18e0164431bc4ebd5432142d478","sha1":"0e7463b4754fba04259090a3e6c70865b6acde18","sha256":"c8e8e1655371e5817147fb849721d215226bb8f03e99bee89e9b3217f91187ba","sha512":"0dfacb79d468692bb1e777bfc2311eb6ae4f4de8d4f1d4f273a6e918a7538cc7f7450c577a7978b281b8c7c8a8f1cd224675df0ed5af052e11f82ec4acbc3af5","ssdeep":"1536:VBqvv4Wcx0q5rQdsUVr80gBJB0t+QZb2sG1/:wv4Ws0gUyUVrRgBJo+QRGR","tlshash":"0c53128569a9b165db633ab88e06708efc0f2ca6eef70074210dd3d93074af1bd4a45c","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-18T19:52:02.246228Z","times_seen":2477,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":646,"dns":0,"connect":0,"send":0,"wait":126,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-080bb2e0.cd0e14eb.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-080bb2e0.cd0e14eb.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"17000-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16996), with no line terminators","md5":"4de1c04902dcb7a4282f358a89b351ed","sha1":"cd6e67e304182b6652bb27902d2f0527242d8be1","sha256":"915b434d9f19ebba3d577b0db9ad2e0dfd277c756b246b885461a112d5aff732","sha512":"b1f8ed3eafc6d16658c4a71f87980827cd088aaf464d694b1af98b63e2f767ea33de34d19d7819598331e178604dd25e2d7256d6505e6f0b40c16ab38f77dcf9","ssdeep":"384:ng9hQXOAjyDfpQ0ReCw6IJGzg0E5EQyqUUhDBusDJB7WmjX:nwhQXOz20ReCwPJGzg0wEQyqUUhDBusR","tlshash":"e972094b9094bc4dab2797e7308f30e1a101a669381559ebf2adcdf7634cd203a1b779","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-11-08T09:49:22.117033Z","times_seen":369,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-4ed2022c.c97fc1f3.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-4ed2022c.c97fc1f3.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"15182-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15152), with no line terminators","md5":"25a64f2b50adfdab9b5b150f5cc2c112","sha1":"255640eaf958d1d299969f137605b99f7c6d796d","sha256":"dc5ecdbc10f7e5ff82aac1c19dd42e79fd9ceed482d0cbdee780fed8cd29fc9c","sha512":"1b1b8d8b2ea2ec54890c87310e9da86658626ed97b33733e30a4838fdeca137ecf6d23dce6d3a652e63ccb14fceccc194abc46de5033cc51408d15d69a32476b","ssdeep":"384:GXG2CRngwJ3INfAKA5kzhXbFNu6MoswnRx:GXG2CRRIbNu2Rx","tlshash":"926219122185b44d9b7641b2316621a1716539c6d40df0abb7b8edfe32d9c18372fb2f","first_seen":"2024-09-25T10:54:54Z","last_seen":"2025-11-08T09:49:22.160791Z","times_seen":366,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-04-14/a8ed7145-c86e-4506-8da2-b8b27f610db4.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IVeLgzurZ/eK0pwOep7emfCcIIjd6urQwv1gjOxQK5zlFNB9ptAC2tT4oi7XijFVXZLArFOYeu/dU5SipZaKnyjGPEPzi7xB\r\nx-amz-request-id: HC7D9HNA5T6VFWN6\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"d88ae54a30fed8843621233e2c13698c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 20191\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20191,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"d88ae54a30fed8843621233e2c13698c","sha1":"9fa542e8677ab97712a7fdc7e1250e36536ec3a5","sha256":"dbe475f26aed9df934e9dca6ef2115b5d0968f312174dfecb9da3ddd3c9640bf","sha512":"606629525b62e056825a3dfbd8ca45e0f84740cad1cfa79ee8dc3e7a34658e951b3aa72bc8bdf276c294912a38d839dd6c2f864791c9038dc395b7d12d08385f","ssdeep":"384:EUsqD+1BG8DGQZl9Y4PyXpFmx82oEu1W3454xOKeq0ooJRImy+90lh:5V2G8RZHP9oEt3454heq0dRI1flh","tlshash":"fa92d1e1ad0a233de68685f6b7f6e2b304f412919bd19d3b53730c858d88261de396c4","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-18T19:52:02.184383Z","times_seen":9897,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":634,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-78328792.1a94a034.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-78328792.1a94a034.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 428\r\netag: W/\"428-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428), with no line terminators","md5":"839113b3a06297a1185b208299520527","sha1":"df67e42e507fdf888b4f0b1706a0bd54e09763ff","sha256":"ae7439473b984cf35ac3a8199ea3a3ccd8c794d239d0e36fec25cd4a3f0222ac","sha512":"da16c62f7431636915bdfa092d4468b66770272aca96b2e4c27d1bf9cd36b044dc03acb199486e709a3a82c272c9ab6ffe79305e116376d596ec30e3523dbf6b","ssdeep":"","tlshash":"2de0a0a051072a3b2563f0b6a8c20427b655f7abe91291107be305092e7b38a68373e8","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.363745Z","times_seen":6807,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-6b60d3e3.f64e7cd6.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-6b60d3e3.f64e7cd6.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"16053-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16053,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16007), with no line terminators","md5":"017b1080f029a0449a254ef292a68d8c","sha1":"3c1476e7b8eec1c8ecc18274bbf9405389c3af54","sha256":"1e34717cbf32fd265857e49a4771a09bdd0118b64ff8207f6345b9daa3188a92","sha512":"281f36d72a3dc2bef243cd81a318a14ef5d541ff408b9f4d7e56e5f3790e0fc78482cce651a5a8d6204dd0f8ed70e23b69a2046de9361d9115972930ecfcdf36","ssdeep":"192:zlxthRrXBrUFGaEERrSG8yH7cudooKwRHfOwMskN8qAVNlQzpuWoIKwRHfO/Msh7:zdX+M1ERDT7HOCqIM7HOnqIG4lRnh","tlshash":"4e72ea2a50446c9c0e62a0e5702b3464b09a59505905df5bffb8ceeebaced38361737f","first_seen":"2025-04-07T23:04:12.928528Z","last_seen":"2025-10-30T00:58:20.103525Z","times_seen":88,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-1b2bdd42.803fdf38.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-1b2bdd42.803fdf38.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1224-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1224), with no line terminators","md5":"8f4842e266916d2010953f691ec74b28","sha1":"61c701a65c81cab91a8e94a55fe779587cd1100e","sha256":"0b728582aa9290c4b63896e9184a7af2bd7af16613ac31f79492033c4fac60b5","sha512":"62f4e3728ee08a29054ef2aa6e83ec425987fd6edc9e48b7416fc3f48b7c6637f78c3a354b0f8700030bd7989f3f0633ff9c73f9903faa07ad352fc85a8b0723","ssdeep":"","tlshash":"c221df81751a126637f7f53e70e211f5b01873e75456cac2a9dce0004fcba267d8bad6","first_seen":"2025-04-01T11:12:06.978272Z","last_seen":"2025-10-30T00:58:20.104052Z","times_seen":88,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/acc8fc49-f110-45dc-ad47-ed783751d459.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/acc8fc49-f110-45dc-ad47-ed783751d459.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Op81em9U3c/DTO8wZWckv/zRFPrXoWHE4XrzzCyTVkaRcxM4e97gyKbA+TH89+yJs5PunoNxKJ+VGwRDrqz4BNSusNF3EKWbO35cD4nUpEk=\r\nx-amz-request-id: HC7E3HFXFV778864\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:42 GMT\r\nETag: \"c634a23e1cf05e83125aa10432132296\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 53448\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53448,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x964, components 3","md5":"c634a23e1cf05e83125aa10432132296","sha1":"d852a10bd34b690c8e498ee73ae2d6c5faae1732","sha256":"5b09946f350ed1fd218a76b5910d839c13519d8e17a1db3e796de2073f40b98b","sha512":"44f4460f3699bf4cec57d45ab78de259706067c0574959c390412dda8723e23ce0c53d9bc273bbef08374e4f3951ad12a07df0ce7a7b81170fdc9b2f41b3584a","ssdeep":"768:13UWmYl3EprZ7Du4TLP9nMxJPbV5Oi5+MlzmD1lqktAYyjSy0PukXXM:RUu0rvXFMxVbVtlzYlIjFeDnM","tlshash":"8a33f2dd6b7180f5c62cccb79fd13ba76a1282bf52b50caf47a38e119184715384f199","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-17T03:09:46.911989Z","times_seen":7225,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":657,"dns":0,"connect":0,"send":0,"wait":133,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/banner_01.183cb7e4.png","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/banner_01.183cb7e4.png HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"91050-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 352, 8-bit colormap, non-interlaced","md5":"183cb7e4e9c1e8e3a5a24e5979f2ea5b","sha1":"5496ab511a333e267732b6fefbb6013565b649fa","sha256":"45d681c6d681a965afd9f35944f61954983d9680514839acdc8311121971ecfe","sha512":"9792d41e1c6dc0b7dfa37263e77b860dd0d3834f5d7655499960c133454edc065e6349719c691507ceb7eb27c2ba5cc5d6291b2dcf5ce53bf703b2d1c19d86e7","ssdeep":"1536:rcn3lhNDAuFKUkblgDG8W+A2iIMbvUPi3qwQZbJPwinyW:rc/aHpbtmMbMPivO1winyW","tlshash":"53930280b679e85b98347db00f9daed77ea512593612e1e7c6f2986c704c0dca9083ca","first_seen":"2024-03-15T18:45:44Z","last_seen":"2026-08-14T05:14:19.567879Z","times_seen":3599,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-b44cb87e.c2dcd608.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-b44cb87e.c2dcd608.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2488-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2488), with no line terminators","md5":"9ebedcfc17a77b41d085ff02d0952558","sha1":"f39aac6f7d5ffc15f477869d236b83dcc918b246","sha256":"9970c1349a172ee68d88499d6ba1958041287a8c892b4ae22fecdd7ad0dcee44","sha512":"169970d3921a730c2da73e67d31fd65ad46d14cd94097e8bbb255ab67872d5f3ae46a6003faae02f6495ffe1a2105bedd32d4881215e8acc4b1755063d401c4f","ssdeep":"","tlshash":"8d514b7922980a3497feeb2d944377a73003fd57e40250cf7868cb1e8cc9b9251e2768","first_seen":"2024-04-14T17:36:32Z","last_seen":"2026-06-06T01:22:22.5903Z","times_seen":4742,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-30T00:57:21.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/ HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:22 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Accept-Encoding\r\netag: W/\"881-1735151418000\"\r\nlast-modified: Wed, 25 Dec 2024 18:30:18 GMT\r\nset-cookie: server_name_session=66ebcb5173d703609993adc2e76f4af0; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":881,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (470)","md5":"e4b9590c2f59325b4bd16bb7b2afe370","sha1":"bbc84b51bf158fbc0825df8426585c47b0443bcd","sha256":"a52e845930d4c7c8d4b7a1fd3e49ad176c08a58c5f67013341af7f108276d731","sha512":"2d48a4ee5290edce6a4ee482b5b21ff34d0ffd8acac67b8379b875ff29bf4a9e33c822401ea7eff27a605e6742bf0e95d665b901e94027d7d8ef0ad6668ee984","ssdeep":"","tlshash":"bc115696cc10e4cc53004aa2dd70f21e968b9c580b71cc903dfd52be4fa4fc58a63894","first_seen":"2025-04-09T10:23:20.262666Z","last_seen":"2025-10-30T00:58:20.10606Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1570,"timings":{"blocked":638,"dns":59,"connect":286,"send":0,"wait":290,"receive":0,"ssl":293},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-5c861bdc.8368db98.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-5c861bdc.8368db98.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"21214-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21214), with no line terminators","md5":"538b9ad19077af5eda36e37151c01f6b","sha1":"07fd48101dfdf0936fe054a6ba0b25bd66c9962a","sha256":"eb9e9fa95d8eb26fc5ea2dac44ae4864df896ed8c2567e4d6d1c8df5cbd16ee2","sha512":"2fdb8343052a3a7c89a5c6430b0728aede0b003a480b7fe9c207adb8ee4456ce0479d1dea6fc1e22a8d3c948cb75251c423cec478dca87a927905ccb42eceeff","ssdeep":"384:3ZMkIQyEkkeX/pIFYJ7SMEB3b5s8CkC2caIdefnpi4iYM5hfZGVRvLjhh+P5/e7E:jIZEheX/pK5sVGUSPLr+P5/eVy","tlshash":"2c921a70b12d333cb537f26a1a809acdb850f653e4568396be9c7325c8c32e37934666","first_seen":"2024-06-01T14:29:20Z","last_seen":"2026-06-05T08:23:29.943647Z","times_seen":1750,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-1b2bdd42.0ed8d85d.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-1b2bdd42.0ed8d85d.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"16670-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16258), with no line terminators","md5":"7c3235f12d0142c480e1c32650754ac7","sha1":"3d64cc073452bb7df0b2d9179ed6def49cd47f43","sha256":"2724f08f4c037a3c2f23403debda0dfee26258f16413057cbcde19a298e52492","sha512":"ffda9db64f31ef29cd380ad45babd123943bd398ad5b163dc55816f707469f6a3e27a900eddeb7ca09cf329a464f1df4391532391d9b7d5ce4acf289fda44e72","ssdeep":"192:WWQoIxq9sbFQz9j+FSrFMrPeNNEf2YHHZXbbdGEEWS9qeiidH+MpP14SNK7+QG:Rrlz9a8rF9NNyZl9EWS9qdiYqhNKiQG","tlshash":"7e72b58a26b9384e8655608630fb358021b126a5680d45ebf17dedf7b7dcc20bd13bb7","first_seen":"2025-04-07T23:04:12.862023Z","last_seen":"2025-10-30T00:58:20.10749Z","times_seen":77,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-2e9544b4.4e8d2ecf.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-2e9544b4.4e8d2ecf.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"25137-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25137,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25136), with no line terminators","md5":"47e7902a7159f39b01cda004a4a161da","sha1":"58d2f722b2ca111daf5c9b18e5198e6c2bb78c29","sha256":"f201f462b375b5c581675949ff5af797d69e0e2ad8be0537a16d16b4a0ea697d","sha512":"bcab113439048278ba03a8666e648e6b00646777286b2e89ffdc8ff8648a3d8ca1703ae1e91688f6c54959dd7153a1bd564e6aa333b28b7f7ad5f72526bdb076","ssdeep":"384:30rAEE1fkpzErG5A+CVmetjTNAAQvyL3tGV/Ufo74WYv1Rr:30Uz8p1nhe5+jyLIUgY7","tlshash":"a2b2f7dc34e1f0ad52f234e0009ba843b27b5a1ab84c1865e355d8c47836aded77bf29","first_seen":"2024-05-31T07:14:57Z","last_seen":"2026-06-03T23:39:34.648342Z","times_seen":2746,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-1fd26ca8.edf36389.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-1fd26ca8.edf36389.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"14164-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14164), with no line terminators","md5":"1698c7c942d184d2b0476280a831d239","sha1":"babee5d63611a8f705cb3b229fb60662768eccc0","sha256":"733fc330942671340554943cd616109e8452a6f2a4365c16d96e83c232dd47db","sha512":"8401869410006b5a4d0dbf79ed3206b5f5148ac91bbd506d94a2a34fc7367ab17ea57350abb62f5e027287dc6355b0da80ab9d8a7ac0fb0ad388bcd8d3f77999","ssdeep":"384:i5s8CkC2caII41+qFkV0vD5rw/CVFcjPipWW59U:i5sVGUI4EFaDm0FcM8","tlshash":"7f5209b37024a539b6b7866d7098a5ce7055ec03c56782bebb5ab23dc4c72e3163034e","first_seen":"2024-09-04T20:51:12Z","last_seen":"2026-06-05T08:23:29.954261Z","times_seen":832,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=1\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":862,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fc767c4e3fa18bf4e7da36c9e80666f5","sha1":"5fc5c83e2e6cd580c73cd6c0b52dfd0a05a29381","sha256":"484a422b771b8e0ea0578baae3980b0cecd8a373ed6d2db36cc830c587e72747","sha512":"fd3e4371d888a804c680bb1bf91e3e89da185c5643c9112fc738d5491f99436b82a6e810a021f7138ed73f8419bdd1bc6d926456c6ea54e4048edffed4499732","ssdeep":"","tlshash":"2011001617e8c4582c0c37c1c9ce7bc9e6acb34b989c4e45c469cf0c8225f38293d312","first_seen":"2025-10-01T18:42:13.716625Z","last_seen":"2025-11-28T05:41:41.002142Z","times_seen":22,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-22/0fee4b69-98bf-4dd0-b2e9-a3eef7d8c9e2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /avatar/2023-03-22/0fee4b69-98bf-4dd0-b2e9-a3eef7d8c9e2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 6h6pNQhHBh+ULotBPKJzpXz0tZPNrVe2E4WGAukKBKi4+wUYGabt9Vok6mtNMRphTT5A6ATGhhjtoGTykfYTrGhjw3AVOYjxTpVoPB6hdes=\r\nx-amz-request-id: VYRNV6Z3VV3ES5ZC\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:39 GMT\r\nETag: \"2f880abf39197c23624ec02a97da066e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 6873\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6873,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 291x173, components 3","md5":"2f880abf39197c23624ec02a97da066e","sha1":"b25a02eeabb058144d354446b3d997210eb7ea14","sha256":"f937788f543bacca3b6d8e11e19123d8a727a46aa05b5bdcb0edd346d02ebc7b","sha512":"2f37634b59d4e1e2124b4c182b2bd349a72149ef956d584e7f6c8f23fd95481b02051f6ceaa8823e6db9641b55aa364eade03d1e14d0ebc259efd4b4600ed277","ssdeep":"192:bpSOyDwhDh0ht/pyBYnSu5HtAUGLW5pe9KIyoQk76AXRtL25V4:wFDwRAiOSMNP+WmIIfQ5C","tlshash":"36e19e13b51ba152ce247b78d7a362f213fcfa2b3d717621f9d06f5069f399aa911004","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-05-17T03:11:11.707162Z","times_seen":2027,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":856,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-131c3a80.ba20e2b4.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-131c3a80.ba20e2b4.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"13671-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13663), with no line terminators","md5":"f2c9493dccc525d419164b9960d631a4","sha1":"b9d45f8e976c712426beba7696cfebd08808f89c","sha256":"3603c30392d4c1b63e65fe10870b4f887fff467db7f0312dc63f5de01771dfed","sha512":"833fff2751a04ce2f66e268d47b94190195bdc49d1af3a8ab540c841cb88a3b01adbfa0072e966212db97540c8c5b34be76e5cba3281f8494b155319db88569b","ssdeep":"192:+ZCje9tFJsHRpVuXmWKD1LtygXI/DSpFMOOr05xq/cictjAfNeNF/BPsGC4:1e7FJsHRpCQJRX+2pDXmmvPJ","tlshash":"245295e6c470a4bd495a81726045e1e0fb653a6cd102514efb7cec9a72ed428333e77e","first_seen":"2025-04-05T11:30:40.547479Z","last_seen":"2025-10-30T00:58:20.063263Z","times_seen":86,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/fonts/iconfont.0080bb9b.woff2","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /fonts/iconfont.0080bb9b.woff2 HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkmallalliancen004.shop/css/app.9673018c.css\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5212\r\netag: W/\"5212-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5212, version 1.0","md5":"0080bb9b021fc0823608910adc2e5fdb","sha1":"b03c86fc4fb5e0542122925d2eb2468cdc842dd3","sha256":"a72e9b48fd851011d2e52a77ae7f72b6de42e4647182c7bae3ca49edf3347af4","sha512":"aa68b80986d5ebce07a92a36839e2b7f4365932ac12c992864ebb4a4e49ab9964e39464d9da1b79a0f963947a669176c3f65b23ef4e4203e520a790bfe6b0756","ssdeep":"96:vSvxwJyBbfhD1WrBqAFtlzkqV4tQWGRGQX/rZHhxm9Sy4kUf6:vS5H1p4FtlwqV4tOGQXtBxm9SpkUi","tlshash":"94b18f888c661528cf387a353840367dc9a3130db636e49acae41f1b57ab78a0159761","first_seen":"2024-02-11T04:26:44Z","last_seen":"2026-08-19T02:14:12.522026Z","times_seen":8177,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/2b1f361d-49af-4f07-99de-f8e65f804abb.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-11/2b1f361d-49af-4f07-99de-f8e65f804abb.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: o5hq8WQF1KqxUYxH571wFlqrCyWwFlpKRl7MipqiTMA6wreNNohHiVbNHI83aXLWqLhTLX+Tpn4w6eOKXa+VuJSjN9m6Jhu7\r\nx-amz-request-id: HC7FH8WMDVQFWX5E\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:49:09 GMT\r\nETag: \"8e45ef03c4d3d3f8338e907948eb5268\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 55668\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":55668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 962x1031, components 3","md5":"8e45ef03c4d3d3f8338e907948eb5268","sha1":"6d8847195c0a42f8310bdcf575ea57a0bb889766","sha256":"de9af8571cfab6b7bdcee5e4fc038ff690fa02e497205a7136633e8fd284f600","sha512":"c14e594f7bd92be09f77d59496127622a20d24f54f2dc28cfc34c33e8f579d2a39d9308b82023403476d985722a30b6bdeae0f8ac97cb69fc9c2d0e466064da3","ssdeep":"1536:d0B/FwBZy6t1n07VqLvJ/qkz5HvEwW2Lto8y:qVFSZd11NpjWX","tlshash":"f84302ca57610c98e499afb2377f37079713a5ed493026a33de69aac110cf112876ef4","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.922784Z","times_seen":7335,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":408,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/4d106467-e1bb-4199-91a3-14c09c397800.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/4d106467-e1bb-4199-91a3-14c09c397800.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Qg3sh3VcOzdACUtJ+d/XmTiEsbmd9QFTi82VI4OzdZ4SiM3v2FuA5SM6sBiXhNGeIIG3ff0bZTRruhHrYhDa+kEEkM4kGGSSQrXPMRn/Urs=\r\nx-amz-request-id: VYRWTGN1BK83KZ4S\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:13 GMT\r\nETag: \"14d9f42f2c63b1613cc542428d426122\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 82584\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":82584,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1470x1500, components 3","md5":"14d9f42f2c63b1613cc542428d426122","sha1":"00e4462aa838f47df6791daf815e8eb0a5cd4bdb","sha256":"755dcfb51fca83949bf37ee825b678dab8b0cdd28d284dc614d367e147e6464f","sha512":"f306d811d90201f184c9381f938e563403ccdea51be8dcaa96f6a040424410bb313194077dbb6431ded01deeed1b7fd7d0698b962ffd3c6c2b04d3f886619cb8","ssdeep":"1536:GnQEa9MqP9A4s7zP1m7+PpzKo0Rm6c2/DJfjgo48h58th4WsEP208:7EadHUj07+PENRmLmlf94AetuWN8","tlshash":"e78302ed3bcea846f6ff59bc185ff48469120935eb324643e31274d8c6b86328f25465","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.927558Z","times_seen":7171,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":769,"dns":0,"connect":0,"send":0,"wait":117,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-04-14/d8d17705-42b6-4aa5-ae9c-82d7e8cc7bdd.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: hi/WRZR6G6W0CvE73yxAbQGfhExX5XUgCsQFHpmAAInB3ESkxMInim2IYedYhW6pVTQW5qm2ObOcRHxD3g6M/iD3UZyYaylm\r\nx-amz-request-id: HC7CSTMNJ4NMW7G0\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"1e463b0bfc58cbe93de38ad62f2ac7ee\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 21173\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"1e463b0bfc58cbe93de38ad62f2ac7ee","sha1":"ae83334518cc12da8587ae98f78a5dd7de9b7a98","sha256":"de1fc345b3fe2ed5fbac321243e8814cd39a37a5554fa0d6b665284da90a6e28","sha512":"e29d51e79e7609dd12e1477a117b2af83259505557ba520681172019687275acc73b92129559a74a03b0f5fdd649c169f5301acbab3c599515ff1a89c1cc4afc","ssdeep":"384:ADUu/oKRfXu/25fNvZ4ZpZKbPzjApEZWZ7CJTa/kKfwu:96b9fNvZDfAEWjvou","tlshash":"0d92d01ded906352d745e472b7e7daae1d0c09d8a31c98286af1cc0b98363193f774c6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-18T19:52:02.353336Z","times_seen":9510,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":714,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/shoplogo.c97e6464.png","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/shoplogo.c97e6464.png HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"3459-1735397370000\"\r\nlast-modified: Sat, 28 Dec 2024 14:49:30 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 276 x 66, 8-bit colormap, non-interlaced","md5":"d08aa02724443ede4cf14ea6d77b65a5","sha1":"0a0a96d1f4531b9b4f74609c774149b2d6436cb8","sha256":"317707def397ea317dce0f2ff06b87c1e0cb8c7aef8302a59a6463b0a6f69692","sha512":"9fdaa733b9b6192080a0392ba1407d694f30fa17a81a082b7ed87f6b364926717ae56e0dd645f66bf867a86ae39c548b6679bc77522be6cda7f4f3f8578dd26c","ssdeep":"","tlshash":"48614d8be7288d64c295507e3c18a0a81f66f5b7f0211bb911a49ff99c479514c83124","first_seen":"2025-04-01T11:12:06.895463Z","last_seen":"2025-10-30T00:58:20.043332Z","times_seen":87,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/matashop2.svg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /matashop2.svg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 764\r\ncontent-language: en\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":764,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (760), with no line terminators","md5":"69f9eeff8ff8c26a8602efe25136b391","sha1":"0e1a331738a6ce2fcbbe986377e29b4683f4a5c1","sha256":"51e65909d5d59a35b8e5d260ac636f7f405fdf4b146193057fc11aea164adf39","sha512":"e0ce38446201ee40cdf9f0cae8c07a682c42c071b7658a09ef75dee06df6b5ed5bdfd065bf649f3211ce0fd98510eb1c273325ce273de8db650b1e3b3e82a7f0","ssdeep":"","tlshash":"8901203ec20a1117fcb6487b36913ea8395d8c8392720734e8548af4d2865f8a76178d","first_seen":"2024-05-04T04:46:04Z","last_seen":"2026-08-15T08:31:16.305702Z","times_seen":2299,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/sellerGoods!recommend_new.action?type=1\u0026pageSize=24\u0026pageNum=1\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":153306,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ac6e56f09506f2fb67c0ba00617f1d14","sha1":"9810d5a4e2f170e4e2a69b712c47dd634290c07d","sha256":"9e6af759965436f887dcb06bd92b3009a6ca74c53cc242404ca1f57342a4856c","sha512":"2ef9a518921842da8404fb79e31cbef142b7ed563ed5365e0b6f845339b7728caf44c0600825afb5e38308a8320f975259c3f021176ec8f1d6880eea178cf985","ssdeep":"3072:eOninswPIJMwkGXhlf5jOMU4Z5TzyK9QD/3mZtaquUdcdZcYaIf5djHCDnVKD:zFthlfZ84J9vZ4x4cDmzED","tlshash":"1ce3d842c398926a1f54019544267beb98fdc1179fb34f98ed2cde34ab98cf6771a08c","first_seen":"2025-10-30T00:35:14.515566Z","last_seen":"2025-10-30T00:58:20.114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-04d0d3d4.76c2e63a.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-04d0d3d4.76c2e63a.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2912-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2912), with no line terminators","md5":"6ab47385095df2242c44f4bc5e537676","sha1":"cd18351a53d6cc1da603b83493fd5cbc1b9bd4eb","sha256":"19bee7784687ded0a20e58c3ef6dcce9b1dd8d225007b4c4dc93f99ce0679f7a","sha512":"77e4f3ea909341ad0755bd5518a236c4205ccaed7c0b4b70313cd428506f5e837cb5d5efebaf939168b30d9a0e00fe684feb3f1a2b1c9e2f6a612420444092e2","ssdeep":"","tlshash":"fe5124503d2c7c1b94bbf468f5c0dfa83ba0a927d353d22a9a57fc059c879c23129a49","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-06-05T08:23:29.875231Z","times_seen":3746,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-080bb2e0.615f6bf6.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-080bb2e0.615f6bf6.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"1594-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1594), with no line terminators","md5":"7bb68d7264949b255c669843ea227988","sha1":"c37129a7f0dbda018bd10436c4812ca558ccca03","sha256":"e1e47844c3390d548f1cd51ea560bf6301ebc6163228d4bf728cfd0a10b5e70d","sha512":"af29987a4411e45d99202eed3f1ebb777ea971e2b4eb617f4232c504c4f83b247c6e6651bb83c7dd153a19306a521a1e4ff6e633c6faf12308f1eb631623f7eb","ssdeep":"","tlshash":"3b31761e3e491d18f833f71f21c24a5e3212a37385b6831a7c43e55afd470c67ab12a6","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.368662Z","times_seen":5573,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/cb96f794-0a2c-496e-aa26-ab6b279d2f68.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/cb96f794-0a2c-496e-aa26-ab6b279d2f68.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xq91julScwFbZBJRJRGxP5dvQIezVBvMQk5h0gX45CRnOEolEHRfMHd7o2529d4pzme+Cxx3RLjjo6OTTDMlJi5SWHHXuYjWmgP6DuEstYQ=\r\nx-amz-request-id: VYRXH83BDCN0S4PQ\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:53:50 GMT\r\nETag: \"caad5ce9aae1754f7c5bddfe540beb9a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 56451\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":56451,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1365x1365, components 3","md5":"caad5ce9aae1754f7c5bddfe540beb9a","sha1":"426aa6930c891900c2d0c7f153ffd99e5c60f92a","sha256":"a60a9f18bd2465a00567a344571f0f0fb16fc4fe351d8f075e617ff68137cbb6","sha512":"131af0909590d760d92254d35c5babae05a08fb8df701421723558815221389083186103f86f1f64c08d95a879361f99a310df2ced8bfce63bd8a414e0e806a3","ssdeep":"768:5SZ56j1M27ehueo9GF5Hl/cnawaL+i/opyDHiu/UB/vH+fhQO5F8h:5SZJhqEF5F/cnJaLZopyDHiuMR2Y","tlshash":"2a43d9078d058bc7a46dc7e8be034eed5f5a6b18e4823eeb50210f8b7e212574c8e56d","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.843035Z","times_seen":7234,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":759,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/app.bca3f2bb.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:25.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/app.bca3f2bb.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:25 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1374378-1735398975000\"\r\nlast-modified: Sat, 28 Dec 2024 15:16:15 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1374378,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64216), with no line terminators","md5":"8a6691b699439ee9cabadcf3eda81751","sha1":"beaad9a1ba4b33ef8fea2bec3881cfbe11538832","sha256":"7480ff61b84bfaed3aae5f7ffd93e5be07535297dd170d034b281c4352cc35e1","sha512":"e318e40c6e5cf8560559a2f40f4e52bf629a85794cf2414042e7dd6b893d853d31e8dd372d17813e0f7ce3df4497181024fb8efd2f74b9e121639fa40e7e920a","ssdeep":"24576:ktN3RNhHsMU9OePl/JwHbcV4Ev4jDyRxKdQ+kBcEdswB9LRbWxQ7BAi9XR0l8dSI:KN3RNhHsMU9tP1JwHbcV4Ev4jDyqW+Jk","tlshash":"19657d9a97d6e3b40fd467a5241b367112b848fbebfeb0d60b98e59031fed00411ea71","first_seen":"2025-10-30T00:58:20.116423Z","last_seen":"2025-10-30T00:58:20.116423Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/css/app.786bc648.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkmallalliancen004.shop/wap/","date":"2025-10-30T00:57:22.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /wap/css/app.786bc648.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkmallalliancen004.shop/wap/\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:22 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\netag: W/\"659567-1735151418000\"\r\nlast-modified: Wed, 25 Dec 2024 18:30:18 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":659567,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2bc8c20a3616486b072f92675cfd82af","sha1":"087354d82669e89ca015ec0e8455df0d82f0250c","sha256":"d82e8dc15ba1e36c3526577f0ff8c259c0563bd1851e067da5578f7bc1c515e7","sha512":"e249be63a96f1e9a0ac0004727735201b08765c4ffe2ad23430629960c093a258070c7f6a27c93af69a93622cf79462d17142765938624afecf284ed82ef1ed5","ssdeep":"3072:CiaQObqA0WS6ar5Ec4f66Wq4jVCgztgyj36hnyBs5SP67C442/iJ8P81mGrwwj0+:CiaBh1+63qX0UxulIzdcIrT","tlshash":"ece44f4e4fa7109987aac676f0a17bf86964b15da357d14ffcc33c06ce4a28f24045ae","first_seen":"2025-04-06T10:49:02.623477Z","last_seen":"2025-10-30T00:58:20.117344Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-4ed2022c.1c551398.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-4ed2022c.1c551398.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2934-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2934), with no line terminators","md5":"7fab75354a4c7f64c989d1addc4375b1","sha1":"bae4ad33eef30ac930e54bf5e0d6c98d545d8cf8","sha256":"b5b3f6af0e47a7901315d5e750525f924810caadc5364938261df41aa51a8699","sha512":"05245836867b6ed5019ac21a7465fd8808549ed70680c84cf16bb148004b6e17655beacbd35c09391ae98642d2cdcf35083fadff3127c86b8a2b6c71b3a57e7e","ssdeep":"","tlshash":"8d5100a1721d79bc4877e4227fd95ddf702cf25bc567820aaca1325f8ce324229116ce","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-05T08:23:29.932743Z","times_seen":3568,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-574f8736.7da50378.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-574f8736.7da50378.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 971\r\netag: W/\"971-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (971), with no line terminators","md5":"364b94b45eaf72b8e38bf5dc4b2348f9","sha1":"869691808bc786803fba4730ffaecb8c2c95a975","sha256":"2da93f714bc866a0e4f302d78c7e5d14d291c27551b29d27969cb57089a191d4","sha512":"a33a5504a3284c5c20c32c7385f61833fada6b1d13e575231c0153a9fdf87d61b7a62caf829e6a22187ec6c8699b87ed13dec945c814e12be7034015716509a0","ssdeep":"","tlshash":"ca119bf151081435b867f26475d055fe316ef343a233446daea4b3a6ce93a9b12212ce","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.434707Z","times_seen":7560,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-6f60fb4c.0136961d.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-6f60fb4c.0136961d.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6493-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6493,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6479), with no line terminators","md5":"c0774b9ca52d70f592b40b45b810890e","sha1":"8376faf1a6376bbd1c819b606b4bda12f6b049b8","sha256":"865d6ee64dee01728f2c540c304cb1895c2620a6feb1dfe298469e8db1f83b92","sha512":"3116f0781ab62718089c3d999c6bc5218883bfcce7b557196c70804af3ee8d737adb05163ef311ee8d89b7e55e254b468aafd2e772faa9ddf6c307cc37c7fac9","ssdeep":"96:YdBljrEdlnRrjYXkLIuGtdcskeIHKKeD7AkMTEWgvbVPLYsoqfZTxq:Erc1j45uGtmzUD7AkMAWspUsJfrq","tlshash":"b9d1f89ea118f80d4e1b9152301d29b3f5a93ee4b024c9dab73dc8fd619cd102b2eb75","first_seen":"2024-07-21T11:22:38Z","last_seen":"2026-05-08T14:37:46.484869Z","times_seen":1069,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-487279fe.6c749e61.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-487279fe.6c749e61.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6113-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6113,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6113), with no line terminators","md5":"67f9f6e1a4058975da1dd9e64ea0ed95","sha1":"01a5284e876d4fa988c7d16db18d17ecbce5c2e2","sha256":"cdf40839b07bf97abe9cb0e698ecc4e419b02b05af5b149d9b0170558ecbd241","sha512":"b05ffeeb5b1111aa618f242db42c249e9a6c94a456b871c075d6a840b4279e57d78f352b288558be8fa0618b4e99ff75feadb3b3474f4498d34a63e67989f750","ssdeep":"96:VB8g+vUHLL1RLefz4UsG8OOOOOOOOOOOONaHYUt0bgCusCoG5YNDwTsoQiEbLGV+:VB83M/1Ufz5sbKYxgCtCowY2duLGm7Aw","tlshash":"2dc119b534386c3956fef879566536cb7406f822d00e95edb640672c88c3f8274b935a","first_seen":"2024-06-01T14:29:20Z","last_seen":"2026-06-05T08:23:29.926544Z","times_seen":1914,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-1fd26ca8.edf36389.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-1fd26ca8.edf36389.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"14164-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14164,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14164), with no line terminators","md5":"1698c7c942d184d2b0476280a831d239","sha1":"babee5d63611a8f705cb3b229fb60662768eccc0","sha256":"733fc330942671340554943cd616109e8452a6f2a4365c16d96e83c232dd47db","sha512":"8401869410006b5a4d0dbf79ed3206b5f5148ac91bbd506d94a2a34fc7367ab17ea57350abb62f5e027287dc6355b0da80ab9d8a7ac0fb0ad388bcd8d3f77999","ssdeep":"384:i5s8CkC2caII41+qFkV0vD5rw/CVFcjPipWW59U:i5sVGUI4EFaDm0FcM8","tlshash":"7f5209b37024a539b6b7866d7098a5ce7055ec03c56782bebb5ab23dc4c72e3163034e","first_seen":"2024-09-04T20:51:12Z","last_seen":"2026-06-05T08:23:29.954261Z","times_seen":832,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/9a213d9c-85e4-4845-ba6f-92cdb3aadc7c.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/9a213d9c-85e4-4845-ba6f-92cdb3aadc7c.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kWrZA3/CNeUfT6aueyxelU7pDVBDIytd+EzUeZYV4zEY79N1AKQLLvuz5XUI8f8W7ji0lY3J89ZVfwNFSqaW+HmsuykpX+aP1kfHWSJigms=\r\nx-amz-request-id: HC74059P7ZRHCSTA\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:52:01 GMT\r\nETag: \"79f3749e1ce4bf0c9b013f036b12791b\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 214318\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":214318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1492, components 3","md5":"79f3749e1ce4bf0c9b013f036b12791b","sha1":"2383c153836375b545a5a5d7c0587ce23bbf1785","sha256":"516a56ae2089333d31ff7eef34b9942743c8b077a55dae222d567e90f58b553d","sha512":"e162bb540582b4bab16f6a0f6a72904ff3be287a953d66b4d02b5a63378ac09a8f932ea9df364267c7b2bb91f64bd11e7425b116285cd82c063f6929b744ccf3","ssdeep":"3072:Ho4OmbHzuE6nENQor3/n5uuZYsV6ilOAn4DJfBg0ThTGlPVjDLQ8CBPMDY:IyUmb/n40iilOAqhTBGZOCY","tlshash":"e22412d80f233e94f604b131c79d339d1a3af6e7b9e70672790699921c3886d3e513a8","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.934148Z","times_seen":7322,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":918,"dns":0,"connect":0,"send":0,"wait":119,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-131c3a80.d40cf9e6.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:26.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-131c3a80.d40cf9e6.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:26 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6600-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6600), with no line terminators","md5":"da2de257c0c24d89e65f962205a1138b","sha1":"07476ddd635e1177168813b38ec243cf0006050a","sha256":"b07267c8d45bdaa39bfb686b9699e548994344e24c4d652fe92cbfdc4e77a6fd","sha512":"87e22c0a0c414596069748f4c2d0bab523ad0014262c90c2178898e5bf8fcd3438353ade755de221393c0b03090d918296bfa8243adb9c736a92b3d63b7d1f58","ssdeep":"96:Zsivfdy8lOFD1vq80WV/LPxDmvo6SOwUu50NJj9MCg:Zz33lSD1v30I/LPxDWrhxuuzI","tlshash":"57d1def2f231112f7426a53be1c385e8bc86b10e93ffd686ff84b514da69196063518e","first_seen":"2024-02-11T18:17:19Z","last_seen":"2026-08-19T02:14:12.485792Z","times_seen":5439,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/right4.6d5f23ff.jpeg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/right4.6d5f23ff.jpeg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"4704-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4704,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x152, components 3","md5":"6d5f23ff9ecb9724c07b2cd1541269f9","sha1":"5e750c426346b1fc8fb169ce8539ac98a13614b1","sha256":"52e08b3d2f52fb6b3ae31c2df98abd68fcc703e02f2fc21b68743f5f0f254d1c","sha512":"4a3cdf202ec25973c245ca77c96782ec1b6b9402dd6fe9d654dd3696b2929a1f0d2d3ad76d63a40998685fe0debf4ac2b66c742307b7f8a8040e386e64c72eb2","ssdeep":"96:Wh+tAiYHAua4Aqt9u4F3DRBfO18AB/x0qaZIPdwR3ODcpOfxukRbnCRTVMfn:E+tEgBvEwgRyHSIPmR3OD485hn66","tlshash":"43a16e9acffa688fff121f7ab124246975810e026a01aaf344014d7a7927c318743596","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-08-14T05:10:09.646279Z","times_seen":4736,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-6820d330.92319b2b.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-6820d330.92319b2b.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3807-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3807), with no line terminators","md5":"43c4a284b9ddeee42b9307d605bcf58e","sha1":"122f3fcfab5747e5f999edea567609bad5965851","sha256":"3fa2cf8eb414e1985c22841ce453495cc293176373d528dc212a335905f1cb54","sha512":"a8d0960e930d64597c6ad8a16e61983e20afa0af836eb1f8411e552d74252b8e3b0b5306ac401eaea8d470486967c1336ad2ac3f1cc39767f87397f2df6f1a94","ssdeep":"","tlshash":"31710e607a22231b5ab2f7fb55c0a1dc3609622ae19340dfe949940ecadf3b65134b61","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-03T23:39:34.496889Z","times_seen":3734,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-000dfe6b.ea868232.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-000dfe6b.ea868232.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"8091-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8091), with no line terminators","md5":"d67ceecb44d29150d361351ee175229c","sha1":"fa4ca7c2c438a2deb58000158d31098ea21f9413","sha256":"98db913de269afb388306c65905a319b49b599a01606da25cc1888af34f360c0","sha512":"158e90352ec3601e67a776378310dcba8fbd3a76c5bcfec64e376bee9108bb8ea164f1e5ec98e4bc25a8733816064622b3e4984fcffdc7b759565f6aaafba798","ssdeep":"192:Ii/AYIgJfN6z4J7HxExWmQP2Rp62AkQB5Lsy:fIgJfN6zK7HBZf","tlshash":"92f17442700ba59dc89ed01261299a30f0b61fa49811d4cfe77dccb8a5c8c65bb5fbb9","first_seen":"2024-03-20T05:26:52Z","last_seen":"2026-06-03T23:39:34.495903Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-377c362c.9ea96d3e.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-377c362c.9ea96d3e.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"10837-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10837,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10837), with no line terminators","md5":"6fd9d845aaf26c692cb1c233ea56291a","sha1":"c7cd9c81263b9aa91bc0ff075232f044e2bf47ee","sha256":"03a3c25d1f2cab4ade0e2d96f51404559623ce5c3f2544473770aa2f61b3aca8","sha512":"94403dcc23e65a982ec8b3254b57b5fae37aec76e90af5ee560d4e6c88439384f1d24404a5f0d185d461ec6d213155776cd448271d920b57439ef1391c75d9a2","ssdeep":"192:pv/sODCMSXc6HqgCI9pn5VsseeyVj+4ceYyifzdF:pXsAKXjk8XeD5+4ceYTfH","tlshash":"2422f70ab066e9b88d9b41123106a27471765fd1f40844edf7bcccb85689eb8332b37e","first_seen":"2024-07-24T00:38:18Z","last_seen":"2025-11-08T09:49:22.202794Z","times_seen":513,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-574f8736.136aa7ad.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-574f8736.136aa7ad.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6662-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6560), with no line terminators","md5":"6827f8cbcee001e0b5387c9acd526284","sha1":"dff077126ee70906ddfc2eb89b479d0daacb9c0f","sha256":"04607b26777138d40de946359b4d4cb887950f6bf623de5230d697194637e1d2","sha512":"fa8f3dcf3984c613461c8d0748a1a381ae3c01b8b7955c6e149c56d2b75b3235e56f28dbef8ac6d8ccd7601e6cab0bcc8d9c4bdbe94683a4d06885bf3335c23a","ssdeep":"96:toVtr/FXo3c1tx+9eXygLnWpcqkIGm6ZriCvWRZr/JGbmA:KBo3go9otWj5KOHGf","tlshash":"3cd1c8156247f55d0d6786a0304a3520b0683f98640da49abbb4dff976e4c18337efbe","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.517282Z","times_seen":3400,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/78b9c29f-800a-499a-a640-a12d95b6cc7c.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-07/78b9c29f-800a-499a-a640-a12d95b6cc7c.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dtKkfiNsHSCfmkh+oKu+JcYivQ2AsqWQFj4Nza+KZ/us7x+J7vhctgu8vCIwdmjKKo9NI+CAex10rDdvbtFgITyb5yBfaDhY\r\nx-amz-request-id: HC7A7PVZ16NT172E\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:47:07 GMT\r\nETag: \"013fe4aba3bf16f7e54fc87414f2fcc9\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 48075\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 857x1050, components 3","md5":"013fe4aba3bf16f7e54fc87414f2fcc9","sha1":"78d37fb3e926e07ff603a0e1d2246523301dbf9c","sha256":"0ea676e6317e0aa668ec454888b2f5a28b97008372616a9b73246ea783643b4c","sha512":"aa8e69c89fad117f57c1d46dedba44e56721d6d8fb70b89b67e51e1ccdb5a8f3398c3ec85fe0d5f69827c0624bd1918b92b21e99f65801e1397232e705f3e881","ssdeep":"768:1cS2+ioGBA89RGlxoPquyl4Y2RKMmjbTai8u6JZfHRAQTGyGsp7+i/27pUi:45tBA8uH2RfmjbTTH6JZfHR79pzuei","tlshash":"8223f12856424859d5a1c1ba507e4def23c2b132bfc692c770cbf2481bea7a9f254e61","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.827157Z","times_seen":7393,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"POST /wap/api/banner!bannerList.action?pageNum=1\u0026pageSize=8\u0026type=pc\u0026imgType=0\u0026lang=en HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://tkmallalliancen004.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f2982955040e03da061e625bb0bf375c","sha1":"20181528c67d8f347372b93f90d96e7d6c3cfd0b","sha256":"aa16d955b045de5c2728a37653d3f51d5f24f6e43879c0214e7b015079356608","sha512":"503575abcbe6db127825c8225d96bc0142d885aa83f74e8b5558ede44b0668ea953ffe7d3087c4d55b98b8550f776ebce4c989e93d571590ed8aa03789e88bb0","ssdeep":"","tlshash":"b49004403c0d1c17040fd545f44c3540455c315307d4c7300d4c5730415f1753d04570","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-19T04:10:00.278215Z","times_seen":7403,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-30T00:57:24.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tkmallalliancen004.shop/wap/\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:24 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"7061-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7061,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5123)","md5":"4f11cbb9e676d6f048328dcb7897b969","sha1":"f84d4b465c8fd139f2ec21533b9890497b2d75fd","sha256":"89274f3f0569636ffe45671359f53ffc1536d2796e843d38d0eec292bd594a2d","sha512":"755dd18c4dc67649729a03c9472e102c60aeb6d049d2e7f5e9c1d900869f8fadc79204e72df0a926d295e60732127fc360657ab476eac17304b17f6cce4d374a","ssdeep":"96:lCckG7+f82tAHhvDYEp2NVNtv4fVO7p+kN2UuzpUgM2JQH0z7ol:lCcufJt2vDYbNVNtv49upOHdVo0nol","tlshash":"e8e1fbb9de40108fe9f0ce879e2ce72aeacb8c771130e454e259984edd68fd4516b943","first_seen":"2025-04-07T23:04:12.917547Z","last_seen":"2025-10-30T00:58:20.124518Z","times_seen":82,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/85c9fa3a-9c9f-44f1-aff5-1f72797dbdb2.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/85c9fa3a-9c9f-44f1-aff5-1f72797dbdb2.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: y5H/d3+rveymDqU70rlSs/E8yqvrjQK4JMUoRud+ko5krEj1M28l40J/8pMfgxyxPvTQktHe+rpdCo/IE6isBN8z4cuBUpP5etbESA3OQb8=\r\nx-amz-request-id: HC7CBN396XNFFQ5A\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:16 GMT\r\nETag: \"b8913d9e5154ba64e3fe7bbb1e357d39\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 115039\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":115039,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1214, components 3","md5":"b8913d9e5154ba64e3fe7bbb1e357d39","sha1":"099900879ee6c6ffc46886c6c7a51deb002620a5","sha256":"323c53514398146cf826ac3c7492cb33fdbf76048efb002dd7245cac6ac00de5","sha512":"1b3d93f1860985cf5a4523f0f637f212b67d23dc4083d74b905209fc50179efceef7878dc86d5f0a19a3e8fe499a5989dcb47f76445872f1551296dda4935dc6","ssdeep":"3072:tnAsQmUqLtgMVlm8Bq1u7PqMQq8+5AsIBYbu2ILf3rQX:BAq5SYlVg1GP50qC2ILDM","tlshash":"eeb3128b8363f8c8ff17a0b56f84b712e516042539b136840eed1614e27ea6f7d47e51","first_seen":"2024-03-15T18:45:45Z","last_seen":"2026-08-15T19:17:09.088676Z","times_seen":2468,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":852,"dns":0,"connect":0,"send":0,"wait":111,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-07/1b624419-30da-466f-9d2d-b0413cb30428.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-07/1b624419-30da-466f-9d2d-b0413cb30428.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: OWcuRalt1OGEX1WrDVhuAMBO/HunuGrLeuNxX+DDGTGlVdR1DbIzu/l3HaxBdImXS10xMBxDf/HCx36ykUNGnhIjodb4HxUX\r\nx-amz-request-id: HC74R3CRG0P52BJ5\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:45:54 GMT\r\nETag: \"dd9bf4005d21a4d398581ee790deffd0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 88025\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":88025,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1458, components 3","md5":"dd9bf4005d21a4d398581ee790deffd0","sha1":"03f62c4320e1236c0e1408079419e62e8043168a","sha256":"97d5ca61ef391b0128979a0e568af2d0d56fdcf41a5aff34ba1feb2f270402c2","sha512":"d89a23bfd4b1b9df695ffa803afc183c6577245165994405b7160bcda6c9d0331dd923dd40d9ec650055a9364324db0424b3919444d7a9089edb1f9841261743","ssdeep":"1536:EtK5Xgkq/61E5KYMb2QG4djBUKFQN0405AQZ9GWGCyLmgSOrH:EEgP0E5K+W4052pC4","tlshash":"b88302942b479630c09b61b0875e0e912c72cafe855f20cb439b9dac50d95e6ff134af","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.830458Z","times_seen":7341,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":422,"dns":0,"connect":0,"send":0,"wait":107,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-7809be7c.badabe5f.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-7809be7c.badabe5f.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"6412-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6412,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6412), with no line terminators","md5":"0633ee4661855b6bbe621c11916c84cc","sha1":"4c0a2a81e69522697b1cbaa7338158639c4aa12c","sha256":"fac6b26cf761221c13291fbb469530d8d6caecfc22f09faa1a9e562bf15ad127","sha512":"b2441da78e3cf4a5c847805eac6921d852bd2f17db15b012485357a438eb0d41d84c853e8ca0784803fefd8a7315d0426b19bc78f310cb23ca2a9818fa232830","ssdeep":"96:+jWBPlmQKmYqqxrnY1vfqQrFvniDypkpNhD93JlyIqdUPY8:+jGPlmQKd1b8vfqQZiepkpNhh+IqdUg8","tlshash":"90d161b2b5b5426a7d3fe3b822d4e4ac75049551e8629be6fed4d028cbc2ff35410b08","first_seen":"2024-02-11T04:26:50Z","last_seen":"2026-06-06T14:40:04.50503Z","times_seen":5236,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/test/2023-03-11/946a7bc7-97f9-47e1-a545-5d6225a7b4cc.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /test/2023-03-11/946a7bc7-97f9-47e1-a545-5d6225a7b4cc.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cZMqBMIDmAwnEuCmb+sFECvIxSY17gRd1XrcjJy6VUBtKIumbBFtr2inuUOPWozDZudBMisaIK4mEkS6+hOCHEXYeQrDVL0a\r\nx-amz-request-id: HC78Q873BAKV01GM\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:49:51 GMT\r\nETag: \"579b662c6df2b3a78037574279a6dbf0\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 204661\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":204661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1174, components 3","md5":"579b662c6df2b3a78037574279a6dbf0","sha1":"ed24732a5a0395104ca95e074bfb18cf78622f50","sha256":"d6ff3f43a65f9161644219724424fe7856866883c30db94beba7ebad88e4f246","sha512":"8aa538d0a0e7d97a4eb7d5a1a24079351bb02ae73ecf2b95affd033c31a358b578ac375e24fc29308cbe00d950ff7b4fff992229a5f8cf378693537ba21a7ed7","ssdeep":"6144:jaI9PtYKdwCGqPD8Qd8NdqM+JxTj+F2K5SG:j3vyp09goM+m55","tlshash":"a41423178a0eb970c47d95738ab75cfff270df56af642ccd00c198e5967a22018ac792","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.923714Z","times_seen":7000,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":124,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/3e25aaf9-50d2-4f5f-947b-4e440b685a95.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/3e25aaf9-50d2-4f5f-947b-4e440b685a95.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: m2GeiYU21Ctc2yoBAHoarvPxjGHu/yyVw3DD8kH73MLhM7r+TnK44P2SI1Rxc35/UGgsGc5orpJKOpa2joukVXYjCNbzzkZkvHqU7Nqi6hA=\r\nx-amz-request-id: VYRMC8BP2MN5QAZG\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:41 GMT\r\nETag: \"35321efbba20476448ab4968f2c839fe\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 120128\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":120128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"35321efbba20476448ab4968f2c839fe","sha1":"83fe2761c569f528754a33a765321eece0353ae2","sha256":"7527a61b9948d7cd050a7d4168625cb179f796be363438ff508ac8207c8b82ce","sha512":"64601349241016579273317119155a21f41f30636eadf44ec18ac7b732d76548bc2006286f1544b5d0b41eebddae885247c7915c6690f5d3c708912fb6894b4e","ssdeep":"3072:yfGehjMNIsGKjnwE3lQTOyatfR9+Ei5ASzJdVGN9T8r:DI3KjnwglQT/wDY9SU","tlshash":"e2c3121fe6888ec6eb8f1f72c11355863f107ba864886e47029b3457bc6cabd5c3e901","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-08-17T03:09:46.842488Z","times_seen":6909,"resource_available":false,"data":null}},"time_used":1012,"timings":{"blocked":898,"dns":0,"connect":0,"send":0,"wait":110,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-fe46833a.da838ec4.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:32.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-fe46833a.da838ec4.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:32 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"4387-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4387,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4387), with no line terminators","md5":"fd7b06dacc8ccbe4430d63ca341d373c","sha1":"c248ffbe4f994ed4955f10bd69d39322a2311d1c","sha256":"0d7bced3f7f766d55a6def9e8a42042284e449b247b753e759f5e93f2504e8aa","sha512":"38eea48ef4bc382bb57c7ff72ed672407308a9309001d8784f246010cb76bc2c6cae32bb8f9c6a462538fef2a87fcca68f5e03f91b63e4080f6e4d8371e1324b","ssdeep":"96:J3nACr3IIIIIIIIIIIIIIIpG2Q1Vum9Ix4tvyE7mtNoXE6DEsCtK:+WIIIIIIIIIIIIIIItW9IxOhmtaXvDF","tlshash":"fe918806e9f2d371fa2b1a3f684572102d304fc893aac4456be57efb218447e077b684","first_seen":"2024-07-21T11:22:39Z","last_seen":"2026-05-17T06:37:32.726206Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/5a905e1d-1756-453e-bc49-baabb5267acb.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/5a905e1d-1756-453e-bc49-baabb5267acb.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0on3FhAbiiESCwXCxpsRtmpW9sSReYByWr34dhyvO3BcmoUd1/RQ5kfu5AHlcgoO0HbIL0VVsxxKIJmik1rSdIpbyhbqFw0cpFWqIITKpGY=\r\nx-amz-request-id: HC7EBPF04FGF1CDV\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:49:42 GMT\r\nETag: \"d65489337eec1ccd7aa3b7d4e85cce6f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 47706\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":47706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1500, components 3","md5":"d65489337eec1ccd7aa3b7d4e85cce6f","sha1":"363ebd6574ea0eef5bd9fa6ea4245988329dbe21","sha256":"9e10a358d6e01dd67c6fb8668c84cf319256fd3e31e95a65fcce29f090c43baa","sha512":"b4854060269a85c9f2f15c2f8c31144f09d1b29b3d68849886ad40ea128e8e3f86ef2546b42e19afe271bf97b66ddb135c3c52027f73ad7dfae5f87786160a23","ssdeep":"768:19SyEOYqddNLA4oD7z2lkXynB4d2ABlYO2yENr38m1BwZX5plmQQctt9QUMRyqQ6:uyfRddNLpNlWyud9lPiAm1+ZhmBA2U6","tlshash":"a32301427fa5aa8bd238af3157c3e749b86f8289d2a61d01f175ac128d41712fd6cad0","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.896913Z","times_seen":7712,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":949,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/img/right2.23d3e322.jpeg","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /img/right2.23d3e322.jpeg HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"6978-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6978,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 242x154, components 3","md5":"23d3e322bf2a163abb5e4331580d3d7c","sha1":"dc9cc27e86b9ab385f24a1ebcacc102b8fee6d12","sha256":"e71173feb88bfac5f997753ceac015ca23f31f9f2234a8083be8a5a4d4e6bc20","sha512":"072c55f9d2a58fab3e13393b1f401d1302aa3269b405f85fdf99a86e9e8860bbc4182db36bf5acbfc6aaa9cf492dd69d194e70513d0f28b4fa287cf6b8b1d0d3","ssdeep":"192:E87ECyhHACQc4X2g7B0WiYHgv+YLX8RrI9GMftmR:fECKHACQcBg7BUYHgv/Qt","tlshash":"9ce19d5cef89ba61df29a13b062535093b23560a7fd297ff754c6c10e956c3056d8051","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-08-14T05:10:09.64085Z","times_seen":4684,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-03-29/bfa34439-cd8b-4b7c-b849-8cd85c7b6a33.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BijQ4HC91y3S/CrKiV2d/d6SANAmv9v26C7vUQ8FAdMLBhdDD1OaKh2HZrKwJkZxoQEikMo6f+51DL2BQImAUMc5Eg3DkN0m\r\nx-amz-request-id: 76CKRD8EEDGC285E\r\nDate: Thu, 30 Oct 2025 00:57:28 GMT\r\nLast-Modified: Sun, 01 Sep 2024 17:37:18 GMT\r\nETag: \"46155632d481869cb9c3e853c7832bea\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 39527\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":39527,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90\", baseline, precision 8, 500x500, components 3","md5":"46155632d481869cb9c3e853c7832bea","sha1":"988a2fdc538ca57eadd8730f028800f736e1ee86","sha256":"1e4dba5d9d5fae2a3aafe91ae59ff2f9f938229ee17b6af825d3d7ae78a93913","sha512":"6a93dfe70a2ee1089d7a1137043494795f98bab7533792b6e736c25439b4c871437a83103e1f02c58b32e7af94aa20e67db51929d945869cff4485b6840c2255","ssdeep":"768:G2faHY+HPhvSyz/eZculI+Pl9UTnIbrimLDGEFK6hbrysiU1JL4:GogPUGkymLDGExSsiE4","tlshash":"af03d0472804ef4b762ce2727e9b1f681f819b4ca8c672cc4a530dafaf657b9491c41c","first_seen":"2023-11-07T02:37:41Z","last_seen":"2026-08-19T00:56:35.853995Z","times_seen":9997,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":1,"connect":98,"send":0,"wait":116,"receive":94,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/f6acb799-6e3d-40d7-9dea-f88b73ddc661.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cedaIh7UtHTGDTOl5b4ZsN+sAsernzjCMopSGrzNdf7V/+2JFfIBqOPcrAcQc64svWcsiveb4pDbn5zpTIe6cM2DjMXcokpjBgH05smzDRI=\r\nx-amz-request-id: VYRGPS9AQZ18YD3F\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:55:24 GMT\r\nETag: \"188e058e6f7fbe9ad0a5f77351993576\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 58343\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":58343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 887x658, components 3","md5":"188e058e6f7fbe9ad0a5f77351993576","sha1":"5aa78ff88b30cbd54edb475d4275fc0d4218497f","sha256":"0c05def09a06513f1f4642a32933517dae2a570113bee37d42eb032886be835d","sha512":"bdf8a4a595692fbe4e7852b784846f1a76a87e36bde4e0a4d20eb190020965784572ee99ea2df88e46b3f22048cc6b2a04fd179d1796a7ab3b4911a699a230a8","ssdeep":"768:1708n17R4+OZnvTjYIoH3etV6CFmPxPoLsRkmVNIHEGjLF8asgzZ0vc/aT39Carl:d07BTjYfXet3mZPoLgknF8BgkB5rDZ","tlshash":"3643f260337882f3f1bbb8386b8d3a1a5b55b4975382cdef11126db2ab07a51745438f","first_seen":"2024-03-15T18:45:47Z","last_seen":"2026-08-15T19:17:09.082371Z","times_seen":2484,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":625,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-f43bced2.c70dd4a7.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-f43bced2.c70dd4a7.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 111\r\netag: W/\"111-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6fa0ecf4147c8ce0222c50c699e3807a","sha1":"a77f07547a33f9b6ec67e6eed37629f508f97a6b","sha256":"6943a6d74dcebdb81ed9b48152a94e537946bd452b87590c4179c966722f5719","sha512":"8cc93fbb80c2bbce59ed5c2bf12fbe7ca0c49da27fa32ef1bbaafbf84aace700d4e60931ad95010ae4f7a5405b3e6f475e9ebf8431beb768ddf5d95ac4efb1ef","ssdeep":"","tlshash":"66b0123a734b04fc8c2ff0203f5988b87ec13322e11924035f9c8024451e7027c30210","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.445601Z","times_seen":8474,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/445c45cc-a9b2-4753-8903-eb823436e494.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: RlUlGnuFpw8xxQ+xdQhJikRfpoickevMxj+tx+1IGeLWlKUhN2Kc/3gPRiCObTn4jwI7P9dlK4ScA4uVTwbCX548JAHmBsqWLEtRXXjERM0=\r\nx-amz-request-id: VYRH58YD2PZBFWF0\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:48:54 GMT\r\nETag: \"07f95e174804bff3d97c5b13f915cf7d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 157447\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":157447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1261x1459, components 3","md5":"07f95e174804bff3d97c5b13f915cf7d","sha1":"fd90a34dd34b37bf7d1c3f62c563c35d2ac8b82a","sha256":"872dcd22912f0f77f949b0642a505d3955f616d070da19c652f4312243eee5c4","sha512":"33010f75dbb816564d931260fb29a588407a9367f82140ccc3bfc33472a049cc8015a5a955832192affe139118dae18a3d5d2a4395227feb2cb0223b7dbc705d","ssdeep":"3072:UUwHcs93dkA8nkSsanKc4hUm1wyHhJ0qmz2WBJBrDymn8hKB1HoT:hs9tkXbsanKJOqCq85D58MB1IT","tlshash":"a0f312537850ac65dd7a4332a3266918bcc0e364dcbdc988417b9d4b87a811b6dbfbcc","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-15T19:17:09.071351Z","times_seen":2483,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":629,"dns":0,"connect":0,"send":0,"wait":116,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/20a7dcb0-4ecb-43d4-bfe4-e7b16a8d6d70.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: usvyg9UVmXLJ70csQiDqyq1LLToPuAYK4+BPSZ3+ANSlui3xds6yf4DTuzZHwOLQ2h/Qa6YlE5nT7xm0Xu52cZSQrmBw+cfeqFMwiiD1kgo=\r\nx-amz-request-id: VYRT73BTQM2VJTZ5\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:36 GMT\r\nETag: \"0cb226a4c24b62a8027c524333a66d1a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 9972\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9972,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x1500, components 3","md5":"0cb226a4c24b62a8027c524333a66d1a","sha1":"bcd930afabd37e41dbff70ff18d3164036810ea3","sha256":"cae70bc988ba3c3472e4161ca54422d0e54923f5b26ee7e7e34716c90c97c2aa","sha512":"0182b799ed0ad9230c5713f54e77dec912e6873d55c491d41e30db98575b93ece455e58effcf4b52a2f1e5ec5638fa27ac16d8319119f1aa3ff0f1fce499789f","ssdeep":"192:1I49RvIJWdElnZFHjjtCcYjtGDCRxXEZJHMcf:1IKRvAZFDj0cOt4CR9EZJf","tlshash":"3f221ae391d3585f9838efdb9b5886e7d82ac355df6a3102204b030677e9f50ce3945a","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-08-15T19:17:09.083759Z","times_seen":2536,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":662,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/avatar/2023-03-22/e2693638-a8e8-40b8-b503-46fd93510048.png","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /avatar/2023-03-22/e2693638-a8e8-40b8-b503-46fd93510048.png HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gQbkbNu5IEE7J0djVUMjTkFQHbW941Cf0A5Pfzhlw2mwV1Ao0bMXsLjb8IQ821pivH84crSS4/Cou8BRoOPyQWlBa+GlVPdBkKohjGNPVhU=\r\nx-amz-request-id: VYRZ767KSTW6ANNZ\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Tue, 21 May 2024 17:21:40 GMT\r\nETag: \"40fb52c897d51c6334e0ee6e3f8e8032\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 14775\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 591 x 521, 8-bit/color RGB, non-interlaced","md5":"40fb52c897d51c6334e0ee6e3f8e8032","sha1":"955b62341fbcad6215f3c0a2378e3969110b4b3e","sha256":"d7811c821cb49a4c1d8222afd5bde67e8d10af95e8d8a40f90e2320cdc82c551","sha512":"b9285da8e31609503fb716b8cbe12bb873e5eb7826c65f1d7ba603fdac0783edb4ae1751b049026028578aa83ba20e227de5e56e19cd2bb55ed27312ce479c84","ssdeep":"384:h5PD9aaDTfXQXE/+HjUbM+paOUiHPRlUgnkBd7k:h5P8aDT4XXMMkaOU2RlUskX4","tlshash":"5662372e08431aaa30935ef59e801171b97171ddb7d52394b14adf3723d5a73fab8830","first_seen":"2024-02-19T23:01:29Z","last_seen":"2026-06-22T12:09:53.858417Z","times_seen":2043,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":851,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-6b60d3e3.155ef381.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-6b60d3e3.155ef381.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3290-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3290), with no line terminators","md5":"013ed3cfca7f4a2bfe1424f47a71b1f1","sha1":"97c969cfb757ccf00865b7a5d1a490c80b10c48b","sha256":"d7fc9a345aa2b72419abfef1e39651c64e8796fd981badf3a04b27e68768e0d6","sha512":"8ef274655f77019cd613a9a41ce1b1603dd84e53eec126eca86788cd595938b9b02de657048732ef9b576178d2a305cddb5a75a47767577bf4395dc31edfe415","ssdeep":"","tlshash":"d4614571262a1a1e65b3e4ba61c021ec760ca336e392cbffdd52800b8dca3f71130b55","first_seen":"2025-04-01T11:12:06.928269Z","last_seen":"2025-10-30T00:58:20.132595Z","times_seen":97,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-1fd26ca8.80a05a7c.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-1fd26ca8.80a05a7c.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"25874-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25874,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25866), with no line terminators","md5":"c3185407bbd1a529c29c8306fdaa07cd","sha1":"5e1852d222858b6f445c4bc7717a4a7df488fe8e","sha256":"3afe56b6e880cd73f8b7a5b31bbfe8a348ef76b6835048c91aaadfe78e807d77","sha512":"e1f577601a88d2073bf23e0172a0615d5205f3aa343a9d4d0a85db2db91b27dfd8f6a90cda5632dc54b163cb3a0688c4e5e05a7c3315f5712a9e704dd1fc9e3e","ssdeep":"384:6osnVXOdCkZXaMsS0UBlDKalA4NMrh+/QeOYHWvzdfP:KedLsSdBlDCU/eYI","tlshash":"f4c22a47a4d1ac7d8b977259341f1294e6762f85d442cc96b63cd8f4e2bba30231b72c","first_seen":"2024-07-24T00:38:16Z","last_seen":"2025-12-14T13:51:49.25656Z","times_seen":545,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:27.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /type/2023-04-14/9f9c23cc-7abd-41ee-a116-01eed9d588a5.jpg HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: NTI3uQEUvjnTWY6qn4e0Ym6zwpC7PGxT6W3FwusTWRfDfgUEhyYBgbaZnDNnZx6fRwNZIDYXK4vONipH0N/7+2ix1kbPGpuR\r\nx-amz-request-id: HC709HSTR8WS5WFC\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:50:34 GMT\r\nETag: \"8d6323e7fdd7e06d404af122b2c85f3f\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 22652\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22652,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3","md5":"8d6323e7fdd7e06d404af122b2c85f3f","sha1":"a5d01f7b4ad71db23c48fa3f117f7cfcc444e189","sha256":"8e2b0eddf8d540aaa3b2076eefe4ba494c7acabed1f15431bafffe5bd3513f72","sha512":"6fc93fb49c82210ca205c6d6dd0831f9016eb24e3a5fbd5072106d5f2b44adb98d39c7df922da930f53d2cbfc28176810e7f2692011d556155f4785c8b314c19","ssdeep":"384:g1oAebo8+5LM5Y3W9rtPwKbJO5Uq6/ECRgQPifCiN:g1o39+dMmKrtPwUqSyQPmCq","tlshash":"eea2be61f8803733c585636c4cbea112585584f288f9e8aba674cee9f2d4c879c49ce6","first_seen":"2024-02-11T04:26:46Z","last_seen":"2026-08-19T00:56:35.865425Z","times_seen":9885,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":714,"dns":0,"connect":0,"send":0,"wait":109,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/83ac7d5d-fa38-4678-af79-63b4066ea171.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/83ac7d5d-fa38-4678-af79-63b4066ea171.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XYHJyyJlLEM68NuwFwRYjTD67KA64FsjmXApBhJGQv7Nm8PfG1w8hV/3X/eD8G7EyVdwMvV18QY+db7FleLWBYx7pwcBZeWTLPTaY4plACs=\r\nx-amz-request-id: HC79KMGVYAZ1FBJ8\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:51:12 GMT\r\nETag: \"7fac67ccc5152addd1ee354754ded6f8\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138263\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138263,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x1448, components 3","md5":"7fac67ccc5152addd1ee354754ded6f8","sha1":"76a721dd33cbe5db8b2b88cec77411504ecac3a8","sha256":"793dc1d79d43111b0d0f51a97639335a2e3b9e183fccf7f9977d4ee211f0abab","sha512":"5838f6f3db5cf29c41bea30d3ffa90a3fcb6621bf31b7ced36bfe2a5e7e9b73c1e3ea4704eb410a18d7ff851d63732f9946f8b5731599ec4ca99842cc5b0b944","ssdeep":"3072:/P49i9HHzuA3rNAKsr+2cStuOt/IaQnNuq01y8e6eJwfNNJaJT:/aixukN6Clst/IFNzP0NNJWT","tlshash":"c7d312fd4380ccd9e222a971610f53ace81735f209889d815b6df9a6f6512b4ffc9a12","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.87022Z","times_seen":7564,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":651,"dns":0,"connect":0,"send":0,"wait":115,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgtest1.s3.amazonaws.com/avatar/2023-05-27/bb83d710-d830-40db-a3ea-ad1c84d707d4.png","fqdn":"imgtest1.s3.amazonaws.com","domain":"imgtest1.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.25.109","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /avatar/2023-05-27/bb83d710-d830-40db-a3ea-ad1c84d707d4.png HTTP/1.1\r\nHost: imgtest1.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nEdC36XXvuNR8pIKpsDchZekDg/pGUxtCxfLVbZoOEqwnOXAFeD5VlxzizrKqXmzxYM7S3M65Wd0BLpr2VENMRAtV7oAEZmq\r\nx-amz-request-id: HC7CEYF4TV442A6B\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Thu, 23 May 2024 01:20:56 GMT\r\nETag: \"72fd36f0d2f325647f3117410aec1dd6\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 14021\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"72fd36f0d2f325647f3117410aec1dd6","sha1":"7ee804c2afef0256e666952f16239780acc8de61","sha256":"c3041ec54bc45f4d7ac030cf08264a14272459bc059ad82c7e8bf501ee96e9b4","sha512":"1288bf9bb3ef598d80744253b06416d96a58aa89d2be7102dcec88c21f1a8fa36fd72ab9040f27bcaf2f24d1fea44c56ed857493834f5f1581c21883041ad6cd","ssdeep":"384:7T3q3eRuJHzW+tRWfF/Kc2hNCzP13TDTv2VOu68CAvkfChP3b:7TDSqec4hGNDfv2Vr6Csqb","tlshash":"99529d91c740f5f9db8406f629001bb133b62573ba3b2a75b6bb84541d7a7a87304fca","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-07-06T17:43:37.918653Z","times_seen":2046,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-487279fe.4f36c347.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:30.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-487279fe.4f36c347.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:30 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3760-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3760), with no line terminators","md5":"5caca6f74af8585b1f791ad2476ded99","sha1":"c86c7aac3520c54f16d76c79fd0a8f3a2eea39b7","sha256":"492f2e19872ab51ac99636f6dac2fe0c4a7695e66b090907a03fe7ff6086d9e5","sha512":"ed01b316f2c643a7c65a86ab9f29ee5632eae25a73a33cf83ed426dddd9d7a079721f4a69053fb9a3e997387ba2eef2931198874de40b27a9ee519c6ec1a5d67","ssdeep":"","tlshash":"e5716158a05be4bccd9a8052701aa330f1b23fe29440c86e77b8dfa49698d61371e77d","first_seen":"2024-03-20T05:26:53Z","last_seen":"2026-06-03T23:39:34.625489Z","times_seen":3181,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/test/2023-03-28/1fe3d3fd-05fc-4b1d-a8fc-364e9d33fcc4.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /test/2023-03-28/1fe3d3fd-05fc-4b1d-a8fc-364e9d33fcc4.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: zG0b/bEi5Vx57z1woBocriZXE6/bHvMN8Qbv2ToHcMnmaUlzBKPCNKbPWcagf7vrWpo4OL5LvuJIREtDNuoglbW7KuQeX4wtmdY7pKFurEE=\r\nx-amz-request-id: HC70ZM5AV48XV03G\r\nDate: Thu, 30 Oct 2025 00:57:29 GMT\r\nLast-Modified: Wed, 22 May 2024 20:47:35 GMT\r\nETag: \"ccff69006dcd3e1ecc8e139bfe9c5a9c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 12326\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1060x507, components 3","md5":"ccff69006dcd3e1ecc8e139bfe9c5a9c","sha1":"723f319128c6d63041259ce5725aaf670ef7f890","sha256":"d3e206d3a678978521738381d06e6fdd5e0371d55a6429cbf8f526c66cde11aa","sha512":"67a316dfe938235480a09e76e0bc23d4555ac73edafa80ad8ba860e9f4dbaf96cbbad1c4d5df1316ed77be2e41e943f336e9e1815bd2f7c834e6d64fd87358e8","ssdeep":"384:1K1hYtA+jmAI17ZItgLQWG1y5p/RDp8Wq:1tDjG9LXGstDaWq","tlshash":"e142ae55ed8640e4c938bff4463b42245a1aee3cafb0b1d60b964ca7ea126401f4ddbd","first_seen":"2024-02-19T23:01:28Z","last_seen":"2026-08-17T03:09:46.825823Z","times_seen":7704,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":639,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-24e95abb.b2e5197a.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-24e95abb.b2e5197a.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:28 GMT\r\ncontent-type: text/css\r\ncontent-length: 447\r\netag: W/\"447-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (447), with no line terminators","md5":"921bce4f483b1f08e93b4216d27b47de","sha1":"b4a29f334d7440c5b2f40841216224b72c6fcde9","sha256":"66b6628c502e0ea0445dc0ae31e229f358bd8a58aaf06e4eb525757fea64d439","sha512":"44e70871a7b43d640237f9f6f070c10a7bed3b3256e548f42488214ac6cd1421ae2209822abbb46e4940081e816f71e92ba2e6a658d1118cf5e3a9f8e7537240","ssdeep":"","tlshash":"f6f0ec012cbd95a15837c53df1c233b42e20369f0206c7a2ac44ac54c68ba613a14201","first_seen":"2024-02-11T04:26:47Z","last_seen":"2026-06-06T14:40:04.334237Z","times_seen":7244,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mall-test.s3.amazonaws.com/pc/gp13/B072P17XY7/71XaaByITlL._AC_UL1500_.jpg","fqdn":"mall-test.s3.amazonaws.com","domain":"mall-test.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.179.31","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:28.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /pc/gp13/B072P17XY7/71XaaByITlL._AC_UL1500_.jpg HTTP/1.1\r\nHost: mall-test.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PyqtcBA476QAD1WS3cMKPL1iJVs3RbVeVBMHiar7Br+IWkLH+M9gqNwzp2Fr6wIb/nPSJAeXWcpn7ha/jxP7QEW+ILwncEMzDkRL/ZFOG00=\r\nx-amz-request-id: VYRRQFFGHV3F2PNT\r\nDate: Thu, 30 Oct 2025 00:57:30 GMT\r\nLast-Modified: Wed, 22 May 2024 11:55:37 GMT\r\nETag: \"c07031c87ba3f296b2a29ebb53a76efd\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 0f0b3c3fd5b39cff700214dbb4d052faa05dd997f97c50e949ff2ff957d9a07a\r\nx-amz-meta-s3b-last-modified: 20230429T135853Z\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 50291\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 546x1500, components 3","md5":"c07031c87ba3f296b2a29ebb53a76efd","sha1":"8797c19f69bbb48e4c42bd372747c9f72a59424f","sha256":"0f0b3c3fd5b39cff700214dbb4d052faa05dd997f97c50e949ff2ff957d9a07a","sha512":"65595c1eba2b03cf51675d61a3973bcf1237d19c85cefa96919172f3a54a7ed6dbd32877ccf384acc924349de486e770d07272aa2bf59eacbfdf8afa1d589ad0","ssdeep":"1536:+XiOB0fBqBhRvoS/ImRQ6o/Ka3yaegiBC:+SuvBTt7Jo/KW6C","tlshash":"0a330122c3c962f4f8011fbd0d03a1bb54991908570a9b3b376a6ab2c7641496fc7f6f","first_seen":"2024-03-15T18:45:46Z","last_seen":"2026-07-14T05:45:08.741567Z","times_seen":2423,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":762,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/css/chunk-83fd3762.bbf1f88d.css","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:29.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /css/chunk-83fd3762.bbf1f88d.css HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:29 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2267-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2267), with no line terminators","md5":"8c6c2e32d246f43938c015ddcdeb69c0","sha1":"b6c0900796b2f918e95196d1deec6b6bb23de45c","sha256":"2286584045d499c3f6d7e0178051e8cee89b1e36412f7e91b095f677e1b46c73","sha512":"9bb9bf502e8cfe654b271eaa74dfbc90f633cc0ffc25cd2811f89643b603d79584fc1396ad80f23b84cf54beffa20f21ab81a34c3f799d0b7b6cda721418feab","ssdeep":"","tlshash":"5241c0737065617ad9b3e36972419ccc7a81f243e3b352f8fe95e43c89c2aa2193019d","first_seen":"2024-02-11T04:26:49Z","last_seen":"2026-06-06T14:40:04.440992Z","times_seen":6380,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tkmallalliancen004.shop/js/chunk-7bbab158.0b91d6dd.js","fqdn":"tkmallalliancen004.shop","domain":"tkmallalliancen004.shop","tld":"shop"},"ip":{"addr":"134.122.147.134","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://tkmallalliancen004.shop/","date":"2025-10-30T00:57:31.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tkmallalliancen004.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 03:19:28 GMT","end":"Tue, 27 Jan 2026 03:19:27 GMT"},"fingerprint":{"sha1":"D7:66:63:35:99:B4:6C:20:C1:67:84:FB:0A:32:A2:B1:E9:A4:8C:49","sha256":"1C:ED:DC:07:89:EA:94:B1:19:6B:AA:A6:7E:0D:64:DD:EA:36:52:6A:A7:D6:3C:6A:73:10:61:4D:86:55:8F:D5"}}},"request":{"raw":"GET /js/chunk-7bbab158.0b91d6dd.js HTTP/1.1\r\nHost: tkmallalliancen004.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=66ebcb5173d703609993adc2e76f4af0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Oct 2025 00:57:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"31661-1735151016000\"\r\nlast-modified: Wed, 25 Dec 2024 18:23:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31661), with no line terminators","md5":"41cca396c26cf8c1316f3560dda199d0","sha1":"c38e7b2ca3da7fa9d800ff683c0c1403a080aab3","sha256":"8225366270404ed0f94f8d07ad9d75bec373d1b7cde309bc538d54e5eb6d7f87","sha512":"5e254b6655675237fbf415261c22b690b0f20f339b6741954c82a8ffa797367219d45da94eeef0281ddbc0d6b3cfa1343d9ccb6563015bfda92c732c476aedda","ssdeep":"768:rutprMqRzEkzhJ00IiQWt0SXuq/UEjet2VE2+5C:ruty+NQWtFXLjeEn+5C","tlshash":"2fe2294f60b5adb8888e2061701962397475ab95f04588d8b7bcceac449cfb4732f73d","first_seen":"2024-07-24T00:38:18Z","last_seen":"2025-11-08T09:49:22.162222Z","times_seen":529,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-30","alert":"Phishing Block","trigger":"tkmallalliancen004.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-30","alert":"Sinkholed","trigger":"tkmallalliancen004.shop","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
