{"report_id":"30bdf62e-53d1-43aa-9b27-91c5bc921374","version":6,"status":"done","tags":[],"date":"2025-12-06T01:53:10Z","url":{"schema":"http","addr":"muhammedmastar.com","fqdn":"muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":0,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"title":"ok138cn太阳集团官网(中国)股份有限公司官网","dom":{"size":4869,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4831), with no line terminators","md5":"a3c9fe19d7a8b11ef1fa3f46499a30a0","sha1":"c0c83252f58f8098ebb4804f49c6e618c0bf94c6","sha256":"a947b6c870b0c873e885758c438cb1d6a92c01416f381ae309e82c68a46f9f6b","sha512":"b0480ead96a5a086ffecf4b1d49157a5d983a12aadae37f77bc8470a5967865332676a009e7e87f7b237f78292b17be658bc0b3129e71c88427a57b840e5e36a","ssdeep":"96:uatAVj/v03juCeQHHatoF587xSXwXNxSXwXm9GdqdYuN:uHpcTRHx587xSXwXNxSXwXm9oEYuN","tlshash":"c0a193ab4dc9d55d4d62e098d279fa8da45b142ede23dc03fda1d0cee914ad988131cc","dom_hash":"domhash0b84724dac86ce57c79c086fee53166c","first_seen":"2025-12-06T01:53:26.14971Z","last_seen":"2025-12-06T01:53:26.14971Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"muhammedmastar.com","fqdn":"muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":0,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-10T01:53:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.wxwangke.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-04-07","domain_rank":0,"first_seen":"2025-10-19T02:00:00.532762Z","last_seen":"2025-11-20T06:25:27.011843Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":462,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fcl.xueyuxingfeng.com","ip":{"addr":"27.124.44.6","port":6987,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2021-06-17","domain_rank":0,"first_seen":"2021-06-17T13:30:21Z","last_seen":"2025-12-06T00:43:31.610053Z","alert_count":1,"request_count":1,"received_data":3645,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fuwanjia666.com","ip":{"addr":"143.92.57.57","port":33888,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-04-28","domain_rank":6763016,"first_seen":"2025-05-08T17:24:56.728732Z","last_seen":"2025-11-27T13:28:29.660592Z","alert_count":0,"request_count":1,"received_data":3127,"sent_data":815,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.muhammedmastar.com","ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":150,"request_count":50,"received_data":728714,"sent_data":19692,"comment":"","tags":null,"fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.wxshsmj.com","ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":41,"received_data":565155,"sent_data":15739,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]},{"fqdn":"tp.xinxiyidiantong.com","ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2019-08-03","domain_rank":0,"first_seen":"2022-06-30T09:41:39Z","last_seen":"2025-11-30T17:30:54.825583Z","alert_count":0,"request_count":9,"received_data":1757760,"sent_data":4395,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"89tongji.com","ip":{"addr":"94.156.119.89","port":80,"asn":211895,"as":"Serverius Holding B.V.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2023-08-03","domain_rank":3345724,"first_seen":"2023-08-03T16:00:12Z","last_seen":"2025-11-28T01:37:56.545203Z","alert_count":0,"request_count":3,"received_data":69532,"sent_data":1614,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"muhammedmastar.com","ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":2,"received_data":198,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2025-12-01T02:12:20.766539Z","alert_count":0,"request_count":2,"received_data":740,"sent_data":812,"comment":"","tags":null,"fingerprints":null},{"fqdn":"push.zhanzhang.baidu.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1999-10-11","domain_rank":1485849,"first_seen":"2015-07-22T05:44:02Z","last_seen":"2025-12-03T08:39:51.647711Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":345,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fcl.xueyuxingfeng.com:6987/3366/ahui/sj.js","fqdn":"fcl.xueyuxingfeng.com","domain":"xueyuxingfeng.com","tld":"com"},"ip":{"addr":"27.124.44.6","port":6987,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ea1fde8e6f2831d4f99ac0507b4fd80","sha1":"61531940c53d71bb868de12c9539df9b5337f552","sha256":"aeb383513e7adab24e7d7203c37120264238adb322a92ef4949451d4e238cb23","sha512":"7eea853f346128f8d67a8d3b7e18303620462ddac5eed5dda0f6cfdfa94bd54436fee9077139a0e0e2a7d015f3f422ff16b65891eac22f2716387b1a55abb790","ssdeep":"","tlshash":"63611d54ef8d20338e133165ae6f958c24be68577948eca7f80c64d44fa0d38852beac","size":3364,"data":"","first_seen":"2025-05-15T23:18:55.56288Z","last_seen":"2026-06-29T01:30:36.559709Z","times_seen":836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/js/jquery.SuperSlide.2.1.1.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42d888f16d8f863265344ea7f47e3a3d","sha1":"920b36c1b5f32b56fb9d20139a7fa47ec48e662b","sha256":"6332a2b7681463db11940ca76aa2775266974c0899529bbd7c10ee997cedf7e8","sha512":"64a0611dd072ddfb2fc049b8321e4285c564a6e231e2414a672aea68a1f307f08100db57477e6d3079e824a6cc53f33a20cb6a8eddb4208a1834177763f2d870","ssdeep":"192:qK3b+EH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:hytnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"5032b55fb6a675ca4597b3f0107f940d232a5965fc8a8ca0b17082c0adb991c343bfed","size":11013,"data":"","first_seen":"2023-03-08T16:08:11Z","last_seen":"2026-08-09T23:18:13.858941Z","times_seen":551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"17bb507f0145f53ae1472dbdec05e0ce","sha1":"326ad5959bc2cfb5192ea3567a243aa06c804fc1","sha256":"42756cfd60212c92eb1e4cf2c5e07cf6b94811736552347e84eb632e0315f969","sha512":"a65922c4ced5b371b43536b426051d5ce2931445c23587d08d08fe1af5d5ab3450cef7794e87e7435aa64adba37c598fb3bccfc467e0c9beebfa0e52937c6200","ssdeep":"","tlshash":"baf0266f190ee2f9c0a9052aaf26d19e728207eb6d006901fe8f01335fa4134b695be1","size":455,"data":"","first_seen":"2025-12-06T01:53:26.243629Z","last_seen":"2026-04-02T10:33:58.863873Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f53a25f52ab0bf6407ae6a1e5a7038c3","sha1":"a55341722f197783994934eb1c1f11f796cb9f00","sha256":"20d8274976ea48fa6002f9929b05fb24fa04d2f68309523da01d8a7e054ea6df","sha512":"5417da76e9839eb9e52336563cde35faf6c76e57ad454d30f727ccdb65056b13a16a6e91ec200efcab374c74d91a281d9aef534f602200ef8ae401126d0a94ce","ssdeep":"","tlshash":"d6f0dcae9845e5981ed378acabebda88c06e5435250ae847a4d7c9cd3c39fc9143134c","size":492,"data":"","first_seen":"2025-10-20T05:22:05.558407Z","last_seen":"2026-06-05T10:43:35.074495Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/jquery.la.min.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe9e3548c1de0e479098049da792ba27","sha1":"696f7cd7aa6dafd4e8a062ac184944ceeeb5345e","sha256":"04ea2a0d89f247988c2a23cacd0772ec2ab2307479c6df14e6b48d4e6658dc0c","sha512":"0b95ce142981d6da0da63aa06688e8697afa5bf83d4039bc4822f0318a9c61a38aa3cd34760e76c49a0a5f091d8e5320f67844f9c74fef18db7073f73e95d83c","ssdeep":"","tlshash":"1521ce5e7c15e2505b55796a37b7eeace9ed0432240adc0654ebc4ac3c25ff90516a0c","size":1213,"data":"","first_seen":"2025-09-13T06:31:00.380767Z","last_seen":"2026-06-05T10:43:35.067063Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2440f9d70ca83f250c83fa920016c4a","sha1":"eaba83be66877166cb9e0add18b0b7302347fbb3","sha256":"d359978c61af65441c1d1553d7afdb0d8c152a6e38f23cb43ccc05993784507a","sha512":"0e5df28278b13f3e292ee696b6c1117a876d25c88f0e7446b497d3ad8d497dad46e4bfe00b666b61c7ce5c49185e3665752824e46c7a756eb9267a82923a76c2","ssdeep":"","tlshash":"31f00e21059f2efd622a62bb6dfccd2e73ab241ea0b0c040be50e42476b198186482c8","size":492,"data":"","first_seen":"2025-10-21T20:00:17.715896Z","last_seen":"2025-12-17T05:03:09.333354Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/jquery.min.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"860a90b0212d8615304d18bf31252cc2","sha1":"a3a97c292481b400ec6416363a965dfbd304d895","sha256":"4fb0a7c042e5c2631d36a50d1770e98156729e6a6214aa797ae1fb6c1d31d6d8","sha512":"d14ba6137c010701f8b40aeb61d6494d935f7d776ef1a006f6833e66d76e9e6f9bc29e6bd96163bd6146c87364b0e4161f2d3bda951634d548f428a6646ca047","ssdeep":"","tlshash":"a501fbe887c4d85b7edc5d43ea14eeca21b2813ba7d971838328fa8c05a9552c59c449","size":726,"data":"","first_seen":"2023-03-13T03:06:36Z","last_seen":"2026-08-09T10:49:05.603678Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-12T05:09:40.591005Z","times_seen":98972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/js/jquery-1.10.2.min.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68730a1386c6ad07c65131e463653019","sha1":"b463ceef8b2e17581c6b0af4f86738079f83418a","sha256":"9700a8d469b7e2864ad9e425a2d2226a320129ec33925eae3c8541374403788c","sha512":"d19d1031a92aab13ea864094ba56374e828b0830f1314fc242540ce6b6537a65a1c6ba605dcdb6cb9c871052d0201bfcd0b1d313b88c0426a892434c2e28e96a","ssdeep":"1536:g4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qA/ZnuUsFv:gGsKXlI2p0WPSblLstfam","tlshash":"f09308ddb2d1b06257ab30bd006f540ff236195e280d8850f129e8eabc75a4d9277fad","size":94162,"data":"","first_seen":"2025-12-06T01:53:26.162572Z","last_seen":"2025-12-06T01:53:26.162572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc36023e50365286a44d0a9efa69287f","sha1":"67344c490f8dd0e822edc672a1169ef95ee23380","sha256":"e30e6dd3c3c06010d240872f244c3f4f75b2b6712f2840994e89c3ade60c711b","sha512":"3cb395091eb110f6432b2f82b64e3ac7a827d5817c14f8ed134622b45808bd47270df306866e4f32b1f118c5f8f7db0b507a3765647f5866b62831b16827ab1e","ssdeep":"","tlshash":"eae0edc1ebec56790431368cc73d84e982ac3862eb444237f4201c3ed6ee129a6532ca","size":421,"data":"","first_seen":"2025-11-14T04:02:48.094136Z","last_seen":"2026-06-03T13:34:05.330663Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"89tongji.com/tj.js?id=26","fqdn":"89tongji.com","domain":"89tongji.com","tld":"com"},"ip":{"addr":"94.156.119.89","port":443,"asn":211895,"as":"Serverius Holding B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f07ff5c725cf522be1b083a9b6f5336","sha1":"b0ffdc146c81f8f338c360caf95bc9ee4576fc2c","sha256":"b9c04e61073b0a84b5a410332017bc6c50fd1a123e95fc96b51f5c15b4eca565","sha512":"0a1aace160ca503acee8c1665063f5e03bc18b6799bbd69ddf070b1c0edff1c384a98f566eceab859bc2f3db39c1530e35d6143642adaee00e50ba4b25916826","ssdeep":"","tlshash":"3df020101d9f6efc2129217b2dbccd7e33bf342ea0a1c0407e80d41565f2ac189483c8","size":533,"data":"","first_seen":"2025-10-20T21:30:04.145942Z","last_seen":"2025-12-17T06:35:43.56554Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-08-12T05:09:40.591005Z","times_seen":98972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/js/slider.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"961b52f45bfbba752034c13d400edc83","sha1":"117b441ed59cc65033541edce352b0988e897195","sha256":"96436f75d2c5f3d02cd897d5a2561b0da7e0e28ff7cd457c992fe6488d002bb9","sha512":"198aa77457eff1d9f1e3f92427fc52fb0e4360c52d4b6c2deccc0f210e5b81ec8a1ebd34f33c3ec6744973c61d04c7d8c986850afcbcafa817743bc0b8cefb84","ssdeep":"48:W50FMDgGxpKud94HGiZu8IxOiLAGxzkFOtdMdWyq:k0aDtxhdoI8iLEOjyq","tlshash":"3f819c0855b23764c46731bcabdfc818963b92176c0eaa44789c97c54fd402ce6ebbf8","size":4121,"data":"","first_seen":"2023-04-09T12:34:40Z","last_seen":"2026-07-22T15:39:46.6545Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3bf742b87eab13561c08070eaee6416","sha1":"fd4c07a8cccbfa6136825ee1e464c182ac0ad0d1","sha256":"95f8b67817f438cf0f147a83f95ae7c2846cf875691a1836239095cdf98f752b","sha512":"8dc25424a6738fabba8148bd305777d8238168992299a9ac467547678048ad60eb9cf1a50b98e3bbac3ec89e205f34ad100a3bbeefd4c38266d0663df0cf0afb","ssdeep":"","tlshash":"c1e026aa29721674578419fa992ff92cf1aa627c0554e003f58dfc230424eef4e2ead5","size":345,"data":"","first_seen":"2023-03-11T21:10:52Z","last_seen":"2026-06-07T06:12:34.817152Z","times_seen":3488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa307469bbeaa8bfb93b8f0830be86ea","sha1":"2b257b7cb4340521bffd74f31ef9305ee81695ef","sha256":"fca110a57b2077e03d7f451da7f9e16f7e857ceba940134402433273a1406c1d","sha512":"db4870cfa53b616b6ed5f8aa2e400dba3f6bbe3983f76bad09d0124d6edcbd1357c86b4f5e957130b27c9c32c72857bc8d612338dd88e249e88a63f8c9c415a9","ssdeep":"","tlshash":"2bf0dcbf5841e6581bc735ac9babeb89d16e0865200ad817a4dac4cd3c38fe8042534c","size":492,"data":"","first_seen":"2024-08-20T11:02:14.955986Z","last_seen":"2026-06-06T19:29:46.309263Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"89tongji.com/matomo.js","fqdn":"89tongji.com","domain":"89tongji.com","tld":"com"},"ip":{"addr":"94.156.119.89","port":80,"asn":211895,"as":"Serverius Holding B.V.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67972,"data":"","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-08-12T23:02:32.908721Z","times_seen":17907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1058b4e5f02fbeccc2907b070c451119","sha1":"fcc2c2fd7a8a4ceb25f8c9bec54eda869e34605f","sha256":"efcb22dc152b256ee7a6600e505de70977024f8e97ee900615faf9371aa46fca","sha512":"a860b8f7f6d8eb92913b620fb3c0364b1ad5bf52c921842a8228b423003b3b18b8db4878543376a7dc974965834c8cd95dfd6717a4fc62b84248adfd3665b906","ssdeep":"","tlshash":"c9f005111ddf5dfd662a627b6dfccd1e73ab241d90b0c0407d80d41575b19c189482c8","size":508,"data":"","first_seen":"2025-10-20T21:30:04.189315Z","last_seen":"2025-12-17T06:35:43.622623Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"71e2a8e56859be903dca4ba312a8de02","sha1":"03563d90b29fc655c67a9295336a74bf64b7e927","sha256":"5cc027752b20cc0eede5bd6cee417c2a1fe18eb4943093523cec7517d7aa5c2a","sha512":"e5382e83a61093052013d52c61fb67cbe86ce4a8d1b66c1c8899232bc3d2fad36418ef2ad40d13d88788a4b16d525dbc3c8678527c530135ee0aab2a4de1bbbe","ssdeep":"","tlshash":"91c02b531c02cc1c41000ac4d0a2fc5ce090f03a8114ec8dc0f174dc21419c908011d0","size":135,"data":"","first_seen":"2023-03-13T03:06:36Z","last_seen":"2026-06-06T19:29:46.318181Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fd2bf967c27b60f775f36287c2d1e2b1","sha1":"873b188854199a5fc71d75e2e748c555e25acd8d","sha256":"e43ca7bbd9f2a38932c097378239e3d319e9bf4b204aec203a152cd26fbe46b1","sha512":"f21a52e37f114e9f56b3fe568720ef8554a23f747cc1315bc8679905d2f3abd2dbbe66e2bac1c392c0c6e4dd42acedb41264a65be93661abfa9a0118fd6f29f5","ssdeep":"","tlshash":"1851336386c8910f8e61e088d234fada5a53682fcf73ac57fe2561dfda054ea49430cc","size":2853,"data":"","first_seen":"2025-12-06T01:53:26.254696Z","last_seen":"2025-12-06T01:53:26.254696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7b59f8ccc9ace40e28add98f45aebc62","sha1":"bc81f4bfed7089d5225ea37279e43bcce725e385","sha256":"d920f8fc4c8519cf3e7b74cb2affd96052f208610908e8db38bd1be8549a1c6f","sha512":"96cd370cdb144983ba5c59ac88c40174afee525ba23e39abdfc9af7cf1a05f0c258e7de439d7a1da8f70945cd99c53670651423f5d16e1be007f5a741eb6a891","ssdeep":"","tlshash":"2ff097af5c41ea581ad735a89babe78dd16e0865200ad817a4dac4cd3c39fe8082934c","size":508,"data":"","first_seen":"2023-07-17T02:16:13Z","last_seen":"2026-06-06T19:29:46.3216Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6a850e2841e82f2b5de81786b1298d7c","sha1":"7df0933d63d0983ab9af1526aa0f627a54f546b0","sha256":"b3adea5d0c22a639b8f98b6280fe8bc9754ca61d0deb7d458f191d4889fcae5c","sha512":"895508591ca2df88360ef7d9c4fb4c95462abe8252b3f10742ead9c7f6f865f9b99eff33631d059b5065f528171b79745c9aa5fc4066e4f23b8dc1f471aa0947","ssdeep":"","tlshash":"bdf00e6e5c44e5540ed3249cababd64cc06e0035240ae403a4d6c8cd3c39fd8042134c","size":508,"data":"","first_seen":"2025-09-13T06:31:00.396282Z","last_seen":"2026-06-05T10:43:35.091332Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f93226741dfc42bc7d20173daa011d8d","sha1":"66f6a235f47a1a3795fa6ccb3b24ae390235b0d7","sha256":"773776dfbed8bd87e81d126e3f6194ae3392093bba9718a51544176981b815bf","sha512":"f48bf3a6b9ac2e0473e61c587ceb02269c59a379fa841c44660d0bb1d910bd41178977f52946c70c638ec50b1c2b95fed61ca92ecf98d151984cade8ee9829dc","ssdeep":"","tlshash":"96a022033e22c088ac0200e3f0b0f83ce0a23c23a882ec0ccef000282c823c8ce00802","size":78,"data":"","first_seen":"2023-12-02T06:14:03Z","last_seen":"2026-06-06T19:29:46.322819Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/css/style.css","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.935Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/css/style.css HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15118,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ee10951c584ae2e7ca90f9613d8bccea","sha1":"090e94965edf5330fe61217da273f8db988349db","sha256":"eafd428e4d585787c9eb757c097a2f4eca501f6b19c5d8ba5ffbd6af17456f6c","sha512":"9f6e9477a183d13219eb6a9b8565c9b05fecd96f366212a3fd5a22d69b404e3ff599b06331dfd4ca559eadc9433bb5e04883397f754306dc3372305ef45b544e","ssdeep":"192:OeIvnZGiApE8I9iM+s6ygzex97LHsF1Ntrvq4jnwsqW5Ls1D+6r1eVw+e4KAN8:wnyW8yS6zcZei5gb5sex","tlshash":"8b626332d766224eb0378627ba01e7dc731ac047e2571fbced61392cc18e4a596b3769","first_seen":"2025-12-06T01:53:26.152339Z","last_seen":"2026-04-02T10:33:58.840478Z","times_seen":3,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":151,"dns":1,"connect":171,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e47650f424.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.950Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e47650f424.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e47650f424.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1144,"timings":{"blocked":943,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/alpha.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.703Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/alpha.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:54 GMT\r\nAccept-Ranges: bytes\r\nETag: \"385729bc3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":924,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"107f754ac167269e3344ac4a0d26f6ce","sha1":"81a01cf7b202575ee157e4e114bbf5e7e1ca0238","sha256":"11552d70be0b4863e5296666962633456296c1b42ad8ffb0e17d97770997fabb","sha512":"8d150f62d2ef7744cfea6f08028ae4ccaee830c69ea64ed95482e3e7c2158f80939ef601e39ef8de2f1749d1588d27549b36bd66ebd3107caaa5450105385e99","ssdeep":"","tlshash":"b7111c5af500b802d59ae49134fa8927ca338570ddd0f515b98ec86b58641b7885cecf","first_seen":"2023-05-19T02:23:13Z","last_seen":"2026-07-19T13:27:51.226949Z","times_seen":122,"resource_available":false,"data":null}},"time_used":1493,"timings":{"blocked":619,"dns":366,"connect":256,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/imghoverbg.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.658Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/imghoverbg.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/imghoverbg.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1226,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/cp.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.233Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/cp.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:55 GMT\r\nAccept-Ranges: bytes\r\nETag: \"867eb0bc3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 1731\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"1897ebb1925756e682190830aff7472b","sha1":"581477a30dbbefb48f9a5283a725ecd303a30cde","sha256":"4dc57d72453bd88cc752416b8bdee2463bc4b79cba62fb261a2fefe5703371a6","sha512":"c2b3b0c309a9f2a03852e116a875039d68fc4714e16b7508fca060764e956a114d5408dd4a102552265d1a534bf54c73026d89ff2215cf8a035cb66446897759","ssdeep":"","tlshash":"1031d88cf9c07c82528869c138e716b75a1e0890bd94d4e878deec570d780f5817d1c3","first_seen":"2025-12-06T01:53:26.156589Z","last_seen":"2026-06-29T23:50:02.277821Z","times_seen":5,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/bcxyd1s1sigdhca92z9vasjpppocuc81b03spnfn.jpg","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/bcxyd1s1sigdhca92z9vasjpppocuc81b03spnfn.jpg HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 152583\r\nLast-Modified: Fri, 14 Jun 2024 06:33:54 GMT\r\nConnection: keep-alive\r\nETag: \"666be452-25407\"\r\nExpires: Mon, 05 Jan 2026 01:52:51 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x200, components 3","md5":"f4c61cf0f86071fdc7715e421bb8a464","sha1":"90d31d040689b43e3566c4ec06503c2f99bfaa5a","sha256":"1b6f9820794efaa5eaf8543afa077994581fc452547f6ce1403d8aa8a35d99e4","sha512":"a8e73e2a4298cbfe7cc5c1ecc7d464231e0869830a2d3733ac3fff44049bd0ab762881ab5655239b3a0f2d7e80a5ede7dc8595d5f32c5b3be2b4513603d5d464","ssdeep":"3072:v6yBYAMfLaJst63owdAvNmat+7zDQY1v1tGXLYaHGoNbnfraSMxPaEAjsPt:icNmY4C7l1sbptNfmSMBaE8sPt","tlshash":"4fe3128dc65c0be4eeacc6f46bfb5f455ed2e5f291a80f5268095251620d3ca3e36b0c","first_seen":"2024-06-15T00:51:04Z","last_seen":"2026-06-06T21:59:48.655367Z","times_seen":1893,"resource_available":false,"data":null}},"time_used":3608,"timings":{"blocked":973,"dns":7,"connect":326,"send":0,"wait":650,"receive":996,"ssl":653},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/js/jquery.SuperSlide.2.1.1.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.939Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/js/jquery.SuperSlide.2.1.1.js HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11013,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11013), with no line terminators","md5":"42d888f16d8f863265344ea7f47e3a3d","sha1":"920b36c1b5f32b56fb9d20139a7fa47ec48e662b","sha256":"6332a2b7681463db11940ca76aa2775266974c0899529bbd7c10ee997cedf7e8","sha512":"64a0611dd072ddfb2fc049b8321e4285c564a6e231e2414a672aea68a1f307f08100db57477e6d3079e824a6cc53f33a20cb6a8eddb4208a1834177763f2d870","ssdeep":"192:qK3b+EH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2HE:hytnqflKFgEWulE8REcS3j/CkR1Xh3","tlshash":"5032b55fb6a675ca4597b3f0107f940d232a5965fc8a8ca0b17082c0adb991c343bfed","first_seen":"2023-03-08T16:08:11Z","last_seen":"2026-08-09T23:18:13.858941Z","times_seen":551,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":148,"dns":0,"connect":170,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180515/5afaa051e1113.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.947Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180515/5afaa051e1113.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180515/5afaa051e1113.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23110,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":737,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e4308af79e.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.958Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e4308af79e.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e4308af79e.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17761,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":508,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/logo/5ce63f8eec45d.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.704Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/logo/5ce63f8eec45d.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 06:37:01 GMT\r\nAccept-Ranges: bytes\r\nETag: \"cdbdaed3111d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 20501\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":20501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 80, 8-bit/color RGBA, non-interlaced","md5":"39f7038ce9d4979962472e697ce19f4b","sha1":"ba6faca0b12ac4c11503e8a91d7b013ae75666ab","sha256":"2598e8cb9f936ed503fcf0aba4806805a4fc960b4ba30605938d54cd4b0ff488","sha512":"971a222a0cb76f802d2cd5cd23cd84ef9ebce3599895ffb34282f25675bb5068ee51e50d2fe18c64b37f45d4ae9983c1d3914746a285c2e52d4cfc634f3a0d5d","ssdeep":"384:khxt4wyXMSmnUt6w2KnWIFVcbaQLO2cggpfifoBjyXXx+AnBkrGTCm2hK:khX4wycST4w2KbvSB0pp+Xx+AnJTt","tlshash":"f592d045dc314eb4bd4dfc4aec8270f97ab30c1e138dd9358e809104a564bdaac66fd6","first_seen":"2025-12-06T01:53:26.160526Z","last_seen":"2026-06-29T23:50:02.249267Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2131,"timings":{"blocked":640,"dns":363,"connect":279,"send":0,"wait":281,"receive":568,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e47eb4c4b4.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.123Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e47eb4c4b4.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/cp.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.671Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/cp.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/cp.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1731,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/js/jquery-1.10.2.min.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.938Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/js/jquery-1.10.2.min.js HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94162,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"68730a1386c6ad07c65131e463653019","sha1":"b463ceef8b2e17581c6b0af4f86738079f83418a","sha256":"9700a8d469b7e2864ad9e425a2d2226a320129ec33925eae3c8541374403788c","sha512":"d19d1031a92aab13ea864094ba56374e828b0830f1314fc242540ce6b6537a65a1c6ba605dcdb6cb9c871052d0201bfcd0b1d313b88c0426a892434c2e28e96a","ssdeep":"1536:g4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qA/ZnuUsFv:gGsKXlI2p0WPSblLstfam","tlshash":"f09308ddb2d1b06257ab30bd006f540ff236195e280d8850f129e8eabc75a4d9277fad","first_seen":"2025-12-06T01:53:26.162572Z","last_seen":"2025-12-06T01:53:26.162572Z","times_seen":1,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":152,"dns":1,"connect":172,"send":0,"wait":202,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/jh.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.944Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/jh.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/jh.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3828,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":736,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180511/5af543b5af79e.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.945Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180511/5af543b5af79e.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180511/5af543b5af79e.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27490,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":945,"timings":{"blocked":737,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180523/5b04b910d1cef.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.948Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180523/5b04b910d1cef.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180523/5b04b910d1cef.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":939,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e477af0537.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.121Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e477af0537.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e463c6acfc.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.732Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e463c6acfc.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 30 May 2018 06:35:40 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0c6286de0f7d31:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 15747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2018:05:30 14:12:38], progressive, precision 8, 210x70, components 3","md5":"9c4181234d122b722590c553534df2c4","sha1":"ad1a5d7637e3f5502696dcac78ad8d6dfc294550","sha256":"fc78ffdc9abf77546a56e079fb609b868f31f9df15ebbcf4f8724480cc8c5152","sha512":"c5acc85fe68fcdb85227ed2a1dbebebea670f688fb306b68cdb32522adac78c1269010afaeb170055c088c793835d2563427153d637814aebf1003a42b670a74","ssdeep":"192:AXOTpwY9b28y4l7mMOTpwY93pknk/EdYNMtKwlyuRRrQnxAvp3/EgN:AUpwY0Pi+pwYgnk8dYNg7l7RRNvp3/p","tlshash":"65623824eb54df63f9e0c23484a4d787a661ae24a6a33681b88e79153f766c29c0d307","first_seen":"2025-12-06T01:53:26.164571Z","last_seen":"2026-06-29T23:50:02.26932Z","times_seen":3,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/banner/5ce6428a9ca41.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.849Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/banner/5ce6428a9ca41.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 23 May 2019 06:49:45 GMT\r\nAccept-Ranges: bytes\r\nETag: \"a9452b53311d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 131807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":131807,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x550, components 3","md5":"e193dd02d9f9c76ec1f63f32ab25deca","sha1":"8e6fa3e9c4ce8821531c450e8c89422f1d7a87d5","sha256":"b30d954e45f49d53b5412725f7c74a3efaad68a071ddf7c2eead33659fde25f5","sha512":"9705d808dcbf5ffa746c457e22317b32e642e0d3278e3ab922cafd751a43670f7aa0c30deb9cab7e90de4a2f6ae1ab3808185d36350ada037de03af349dc115d","ssdeep":"3072:CxpMdxASKlZzYxJ5s/LtXh1m/OfNviiGn29B70h:CxWxClZcsT1fNvizn2P0h","tlshash":"d4d30244e3690bf4e40c0327ea244d0e2fde9955682d5df778624ab3efa33264db2746","first_seen":"2025-12-06T01:53:26.167353Z","last_seen":"2026-06-29T23:50:02.25017Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":1537,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/n_d.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.665Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/n_d.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/n_d.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"89tongji.com/matomo.php?action_name=ok138cn%E5%A4%AA%E9%98%B3%E9%9B%86%E5%9B%A2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026idsite=1\u0026rec=1\u0026r=318976\u0026h=1\u0026m=52\u0026s=50\u0026url=http%3A%2F%2Fwww.muhammedmastar.com%2F\u0026_id=f2312e56033a1f24\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=vnlz95\u0026pf_net=184\u0026pf_srv=192\u0026pf_tfr=1\u0026pf_dm1=1787\u0026pf_dm2=1397\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"89tongji.com","domain":"89tongji.com","tld":"com"},"ip":{"addr":"94.156.119.89","port":80,"asn":211895,"as":"Serverius Holding B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.428Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /matomo.php?action_name=ok138cn%E5%A4%AA%E9%98%B3%E9%9B%86%E5%9B%A2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026idsite=1\u0026rec=1\u0026r=318976\u0026h=1\u0026m=52\u0026s=50\u0026url=http%3A%2F%2Fwww.muhammedmastar.com%2F\u0026_id=f2312e56033a1f24\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=vnlz95\u0026pf_net=184\u0026pf_srv=192\u0026pf_tfr=1\u0026pf_dm1=1787\u0026pf_dm2=1397\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: 89tongji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: http://www.muhammedmastar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 204 No Response\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:50 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nVary: Origin\r\nAccess-Control-Allow-Origin: http://www.muhammedmastar.com\r\nAccess-Control-Allow-Credentials: true\r\nReferrer-Policy: origin\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Response","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"muhammedmastar.com/","fqdn":"muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T01:52:45.685Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nConnection: keep-alive\r\nLocation: http://www.muhammedmastar.com/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":170,"dns":1,"connect":172,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/list.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.914Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/list.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:56 GMT\r\nAccept-Ranges: bytes\r\nETag: \"a46d7ebd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 2425\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b38ee28bccbbbf64d522631df723915b","sha1":"a898e05c4b5a24da0cc28a6a9cf68ac6d05222d2","sha256":"ecfaaaab6b965e3b1370a4cc2c3807ea3cb904acaf8e21ea8fdac43bc57143df","sha512":"e710e393454fd6c05b29674d35252c474ae6e3211c666e55df62fcdb7f1e8502d1a4758b302fd24dc355428b3b96aa3b7d6e8f7f93ea5b2a37d78be46db5c9d1","ssdeep":"","tlshash":"d4412ac4f6423401da69f0823da370af9f23c9505bd190a57e5ed2760b212bc8c805e3","first_seen":"2025-12-06T01:53:26.169396Z","last_seen":"2026-06-29T23:50:02.284865Z","times_seen":5,"resource_available":false,"data":null}},"time_used":992,"timings":{"blocked":712,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/tel.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.611Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/tel.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/tel.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2475,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e47650f424.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.116Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e47650f424.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180523/5b04b910d1cef.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.108Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180523/5b04b910d1cef.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/aboutbg.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.860Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/aboutbg.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 23 May 2019 07:32:54 GMT\r\nAccept-Ranges: bytes\r\nETag: \"e9bb13bc3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 54149\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":54149,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1920x616, components 3","md5":"dd0fc111792179485661a7bcc5395de1","sha1":"c7e41c800dfa03da8491f387d2a651c3bcf0d53b","sha256":"a8789664107168c1cf2e0011ba7a4137ef020ab5bae6fccf4753a60f8106f26b","sha512":"bcbb99bec64c8c0d183b6efbf845b1e7c798dad8c049563cb9258008a93e28b23418eae316e21fff4e11604f3bedcfe75aa9b9da73a072ae6ce819c2e6a0ee33","ssdeep":"1536:VwfpMDOrQH4oElhXCOwL7AWdzPVYMVu6E:mfpM9ehFgzPVYMVtE","tlshash":"e933d0bb670533d7d1c8577652f30b263f6a48b0e3600947a234556ee8e5ba03f0a3a6","first_seen":"2025-12-06T01:53:26.171264Z","last_seen":"2026-06-29T23:50:02.25549Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1948,"timings":{"blocked":1161,"dns":0,"connect":0,"send":0,"wait":281,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/n_d.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.049Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/n_d.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 23 May 2019 07:32:57 GMT\r\nAccept-Ranges: bytes\r\nETag: \"49d1b4bd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 4827\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 35x40, components 3","md5":"003904f78e1a5b5ba1c2ff031e7a04b8","sha1":"b2fd16a16643c6f9f568a6442cc271b0def908b5","sha256":"e1976199504ec06229bf7ab1df40b54699409586cb7868a081ca28aa7ce88d1c","sha512":"368711f836adc6336d999161e6ca2cd70bc32f5a7f15feac6a5553d2caa2d2a9795407eaa271c3dc7b6db33d219b5b454927eb8bb46b242e65230f484fdb9ba1","ssdeep":"48:OKS2Nn2w+tJ31MFflsXlf/lulel4wlwx+6MjnNsvIYWiR5QkyTJbZPHXZ9u6gbVG:dSK25pgN26MT0D5MdtbZPAVwzVtb/p","tlshash":"37a14b7efa92ef22e5f4e77428f1d752a3532620e7a3b68535998a2634500c41a0f1cf","first_seen":"2025-12-06T01:53:26.173323Z","last_seen":"2026-06-29T23:50:02.28344Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1625,"timings":{"blocked":1344,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/vinb9ufmfncf975y9rvx382nt7h7123khi4lo6kk.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/vinb9ufmfncf975y9rvx382nt7h7123khi4lo6kk.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 214316\r\nLast-Modified: Thu, 14 Nov 2019 06:29:46 GMT\r\nConnection: keep-alive\r\nETag: \"5dccf45a-3452c\"\r\nExpires: Mon, 05 Jan 2026 01:52:51 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214316,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop CC 2014 (Windows), datetime=2019-09-30T17:50:59+08:00], progressive, precision 8, 1020x255, components 3","md5":"8fbc123b4636b3c9a8f1411c160a9e99","sha1":"48f62c4c22122a04026a1e329bccce93fc7aae77","sha256":"69f497a64f8dab090cb547e5f9063b1c33d0d8fc87573f87eff1016fb2d4dad5","sha512":"821f26949d9b21304202d7cd0945a3351e3420ebba3d129b6111176978e3a5ba1e4135a963042eaa59be817cf02182f8761c7a0ba2fd9271c4b53304d69a3671","ssdeep":"6144:p5K6mEbeWe5b5/AT6dvesgRvyNlbc+6cKO90asTGIo5lj:u6tbeWe59oudvpg5yPblXKUIGlj","tlshash":"cb24130bfa57e081d29a4db4c077677cdc4f8b56aaa4563ae66c2c2cc7d05c3b0ad246","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-06-07T06:12:34.779135Z","times_seen":2058,"resource_available":false,"data":null}},"time_used":3870,"timings":{"blocked":1029,"dns":7,"connect":345,"send":0,"wait":673,"receive":1118,"ssl":695},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180511/5af544c4b34a7.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.921Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180511/5af544c4b34a7.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 05 Jul 2018 06:41:31 GMT\r\nAccept-Ranges: bytes\r\nETag: \"801f3e352b14d41:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 101517\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20189,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=753, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=731], baseline, precision 8, 977x733, components 3","md5":"842d0cab946deda905087cd89a9a457d","sha1":"56e4caa7b7e651043ab2dcccecb600d6ff44b824","sha256":"660a4877648a4fd471231701357df29010e8b93010d7ea815a611d7bfff51915","sha512":"57e09a49019d0d5c302f95a41b064e966c2b962166b809199a7c6373781d50ac8b20879087a55c932b5469a4be4008635a23507ea05d3a32c01b4e8f296b9cbd","ssdeep":"384:bkS1r7cqmpIPuTkS1r7cqmppnC3Y4iJKaNegaPxcl:bkSpZ2IPwkSpZ2pCkVNefOl","tlshash":"d5922c255f698e82ecc6293b4395ca72c3718ec05b1767e3ffac374a3729e41486416b","first_seen":"2025-12-06T01:53:26.176631Z","last_seen":"2025-12-06T01:53:26.176631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2101,"timings":{"blocked":1560,"dns":0,"connect":0,"send":0,"wait":276,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e4672af79e.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.301Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e4672af79e.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/uqpu1x4t749lwvxkguwwsdova106pr.jpg","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/uqpu1x4t749lwvxkguwwsdova106pr.jpg HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:51 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 200943\r\nLast-Modified: Fri, 30 Sep 2022 18:42:07 GMT\r\nConnection: keep-alive\r\nETag: \"6337387f-310ef\"\r\nExpires: Mon, 05 Jan 2026 01:52:51 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":200943,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1000x200, components 3","md5":"93b5fd25fa34d9f1f81869e9aa56dda7","sha1":"dc51916e54c77eb33536ba9acb346fc1e86cbe62","sha256":"e612039673cad23b189f1b221bb32b9f8133ea1327fb12e3ea5ef4723606efb4","sha512":"31ebdd12f3bf07d18fb093b3ea7e3783f1242ad253c494413286a5c3403ac2c208904b3bfc067a4c8933628876507889b07fe23361818d2cf5d931139325cfde","ssdeep":"6144:e8qa7OrrWXdlKyAcrn9Y1OhN8zvJ20dJj6SI:4a7Oyd0ncm12kvj6SI","tlshash":"a91412342adb8aececd6b579af1017a6114b0df2d4499fd3c634a838967e20b0d5bd70","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-06-07T06:12:34.738588Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":3874,"timings":{"blocked":1031,"dns":5,"connect":340,"send":0,"wait":675,"receive":1120,"ssl":701},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/73in1fspksw4vkiz33cink1f95gkt6.png","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/73in1fspksw4vkiz33cink1f95gkt6.png HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:51 GMT\r\nContent-Type: image/png\r\nContent-Length: 85269\r\nLast-Modified: Thu, 30 May 2024 07:57:09 GMT\r\nConnection: keep-alive\r\nETag: \"66583155-14d15\"\r\nExpires: Mon, 05 Jan 2026 01:52:51 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85269,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1000x200, components 3","md5":"dd634dd0e0dd49206dcc5895ead43e77","sha1":"1ed15d3f4c9f439901ad35e48e997cd61e21da0c","sha256":"e5bd386dd7f166c21d2b28383dc15fc365a6a9dcad30f3d31ea03ade011f980c","sha512":"520f5c0aaa03859ad2b7a39b5aab91564d24efc9e54f802d07a2e0922089836fd44e43caba81c133e1344efee4d923759abf5bbb60b03049f0ff09c9ab924ec3","ssdeep":"1536:ghHfCs1mEmhYj/SLO+lC1zjLUKOjQ6FmkyjQ5UpshRm6gccXc5s5+IsI0h:YfC2m3qQCZXoDmkyjQjhR/BcM210h","tlshash":"6a83020460391e2efad6bc306e2d59bf96a59012e3a7d2b774e6386ff3b8130114c54e","first_seen":"2024-06-02T21:28:55Z","last_seen":"2026-06-07T06:12:34.774971Z","times_seen":2101,"resource_available":false,"data":null}},"time_used":3227,"timings":{"blocked":1038,"dns":10,"connect":340,"send":0,"wait":684,"receive":444,"ssl":706},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/jquery.la.min.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.072Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /jquery.la.min.js HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:50 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Tue, 19 Aug 2025 11:53:57 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"68a465d5-4bd\"\r\nExpires: Sat, 06 Dec 2025 02:52:50 GMT\r\nCache-Control: max-age=3600\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1213,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (555)","md5":"fe9e3548c1de0e479098049da792ba27","sha1":"696f7cd7aa6dafd4e8a062ac184944ceeeb5345e","sha256":"04ea2a0d89f247988c2a23cacd0772ec2ab2307479c6df14e6b48d4e6658dc0c","sha512":"0b95ce142981d6da0da63aa06688e8697afa5bf83d4039bc4822f0318a9c61a38aa3cd34760e76c49a0a5f091d8e5320f67844f9c74fef18db7073f73e95d83c","ssdeep":"","tlshash":"1521ce5e7c15e2505b55796a37b7eeace9ed0432240adc0654ebc4ac3c25ff90516a0c","first_seen":"2025-09-13T06:31:00.380767Z","last_seen":"2026-06-05T10:43:35.067063Z","times_seen":20,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.887Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Length: 333\r\nOrigin: http://www.muhammedmastar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 210 Unknown Status\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: http://www.muhammedmastar.com\r\nAccess-Control-Allow-Credentials: true\r\nServer: TencentEdgeOne\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Sat, 06 Dec 2025 01:52:50 GMT\r\nEO-LOG-UUID: 18298278880220451224\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"Unknown Status","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":79,"dns":56,"connect":23,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.159.107.113","port":80,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.900Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Length: 332\r\nOrigin: http://www.muhammedmastar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 210 Unknown Status\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: http://www.muhammedmastar.com\r\nAccess-Control-Allow-Credentials: true\r\nServer: TencentEdgeOne\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Sat, 06 Dec 2025 01:52:50 GMT\r\nEO-LOG-UUID: 14467140555574862947\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"Unknown Status","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":65,"dns":43,"connect":23,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180511/5af544c4b34a7.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.945Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180511/5af544c4b34a7.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180511/5af544c4b34a7.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20189,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":738,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"push.zhanzhang.baidu.com/push.js","fqdn":"push.zhanzhang.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.598Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /push.js HTTP/1.1\r\nHost: push.zhanzhang.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":2275,"timings":{"blocked":1137,"dns":878,"connect":260,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/aboutbg.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.653Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/aboutbg.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/aboutbg.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54149,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e462a40d99.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.955Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e462a40d99.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e462a40d99.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":17374,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1536,"timings":{"blocked":1337,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/navbg.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.844Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/navbg.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:57 GMT\r\nAccept-Ranges: bytes\r\nETag: \"5d25c7bd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 1108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"1fe8d275b5f6d10f1317622ea901d6c5","sha1":"7085c6f7cf194d7bcaca025c4e96ccdf9d51e819","sha256":"cd2be37dcf358cff776b3fd91f0ce912d39c96c95c1f653cdd72760ed600de59","sha512":"81bb0f1a214a72d1873d453214630fd7a7651ea453b280c5b5578f51a3745139f9532e193627b357a12ff7416807739378391ce688a343de32851c9c5bd63fd9","ssdeep":"","tlshash":"23116689fb816c42d78dea421ce644279922095089d4f161eccbd9336d631bb293dddb","first_seen":"2025-12-06T01:53:26.183349Z","last_seen":"2026-06-29T23:50:02.279654Z","times_seen":5,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/yosaptvht6oakqvv813zyv433092xz.jpg","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/yosaptvht6oakqvv813zyv433092xz.jpg HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 276856\r\nLast-Modified: Fri, 13 Jan 2023 09:53:21 GMT\r\nConnection: keep-alive\r\nETag: \"63c12a11-43978\"\r\nExpires: Mon, 05 Jan 2026 01:52:52 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 200, 8-bit/color RGBA, non-interlaced","md5":"4ef354f5294d774e33f8af4dc58570d5","sha1":"03ed15bc6cc653aa133fd93ef460c4597b9d6b15","sha256":"81d283b3afc1f1a6317c7c428225e6fcd87710baed7fb212f51478c657fa5c1a","sha512":"7b044af22b2ccc32ab7793123027298856949276680eaabb30c45e6bcd60a814e3b74e51b32aa62b8e5f22515bd0ab906b58b9bf78d420979ba820993f7d3d6c","ssdeep":"6144:+DeWbLkZ/hgyR9/f7ljJoJ2yaHeSX59rP7uCOWEYTXCJRL:+6WbL05gMd7XUaHH5ZQIXm1","tlshash":"2f4423b3ae8015df4e8d02f3fb540936e3c965b21f8a7e264a571e9cc7ee96d0910706","first_seen":"2023-05-17T02:16:24Z","last_seen":"2026-06-07T06:12:34.77378Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":3919,"timings":{"blocked":2164,"dns":0,"connect":0,"send":0,"wait":706,"receive":1049,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e47eb4c4b4.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.949Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e47eb4c4b4.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e47eb4c4b4.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1151,"timings":{"blocked":946,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"muhammedmastar.com/","fqdn":"muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T01:52:45.301Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/banner/5ce6551cdd40a.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.696Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/banner/5ce6551cdd40a.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 08:08:59 GMT\r\nAccept-Ranges: bytes\r\nETag: \"aaadc6c63e11d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 15708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 135, 8-bit/color RGBA, non-interlaced","md5":"b0d9031d00ed4f909bd96f60c60e91b7","sha1":"557feafdd56f2e40087a65dd28e7605b2b64d8ba","sha256":"7e1ccd3cb7ca57ab7e772ebe59df7def0620bb7ee4aee082ce1d223e9c81cbb0","sha512":"1e5ae7bc9af88d6320cdf66b87ebed32767aac886be1b49043b22e7e49134147c49cd42615e85b96b6e937fed0db0505655b946e2daf940e0013a7b2be8f1049","ssdeep":"192:439GJ/22suGaUNYNTFN/usYNWT56axK7jOJGwsCDTWGjEmap4GPe/sZuAHkqegVt:gkjsHbkv/Os5xK7jWjJwx4X/YyyoRu","tlshash":"f962cf07fb8a5e61f38345c9c6501a23b679027893e86be46ace85e633d59617019cc3","first_seen":"2025-12-06T01:53:26.187063Z","last_seen":"2026-06-29T23:50:02.259152Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1282,"timings":{"blocked":666,"dns":0,"connect":0,"send":0,"wait":299,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e4698501bd.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.319Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e4698501bd.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/banner/5ce6429a0cdfe.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.626Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/banner/5ce6429a0cdfe.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/banner/5ce6429a0cdfe.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":125689,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wxwangke.com/Public/bnimg/67d228fe1abcb.png","fqdn":"www.wxwangke.com","domain":"wxwangke.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.960Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/bnimg/67d228fe1abcb.png HTTP/1.1\r\nHost: www.wxwangke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e464cbaeb9.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.302Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e464cbaeb9.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/yuan.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.668Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/yuan.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/yuan.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/cont5_listbg.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.040Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/cont5_listbg.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:55 GMT\r\nAccept-Ranges: bytes\r\nETag: \"eaa79fbc3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 1024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"8d17b24325b9975b595782b0b8da8169","sha1":"2eed0c3caaed6b4fe697fe7813565b1b781150d5","sha256":"28db07fe4c81dab21c7c0f757d5d3d3fb127fd903b2d422ee89e0452b02c6ebc","sha512":"435b958aaa069529561e938b30436475df4e51e6de5746f2c7f7db0e151a3f5adf167ae5a2d9ae175bd4047f720918d885ded294e11ab15f18c1ed248a942575","ssdeep":"","tlshash":"21111249f9802d80d1c8ea811ce69437ae178540ebd0e758accec81728761ba40598df","first_seen":"2025-12-06T01:53:26.189824Z","last_seen":"2026-06-29T23:50:02.262878Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1353,"timings":{"blocked":983,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fcl.xueyuxingfeng.com:6987/3366/ahui/sj.js","fqdn":"fcl.xueyuxingfeng.com","domain":"xueyuxingfeng.com","tld":"com"},"ip":{"addr":"27.124.44.6","port":6987,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fcl.xueyuxingfeng.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Sep 2025 11:34:45 GMT","end":"Wed, 17 Dec 2025 11:34:44 GMT"},"fingerprint":{"sha1":"3B:EB:69:43:26:9B:29:D0:20:6D:C6:E8:E8:EC:EC:A8:49:1C:87:11","sha256":"59:54:B2:CF:7D:5E:9A:65:64:A7:4D:DC:18:B7:54:44:5A:32:E7:9B:95:F3:1C:56:3F:70:F1:FB:23:53:25:C3"}}},"request":{"raw":"GET /3366/ahui/sj.js HTTP/1.1\r\nHost: fcl.xueyuxingfeng.com:6987\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 28 Apr 2025 11:39:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"680f68da-d27\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3367,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"5ea1fde8e6f2831d4f99ac0507b4fd80","sha1":"61531940c53d71bb868de12c9539df9b5337f552","sha256":"aeb383513e7adab24e7d7203c37120264238adb322a92ef4949451d4e238cb23","sha512":"7eea853f346128f8d67a8d3b7e18303620462ddac5eed5dda0f6cfdfa94bd54436fee9077139a0e0e2a7d015f3f422ff16b65891eac22f2716387b1a55abb790","ssdeep":"","tlshash":"63611d54ef8d20338e133165ae6f958c24be68577948eca7f80c64d44fa0d38852beac","first_seen":"2025-05-15T23:18:55.56288Z","last_seen":"2026-06-29T01:30:36.559709Z","times_seen":836,"resource_available":true,"data":null}},"time_used":2416,"timings":{"blocked":1044,"dns":36,"connect":327,"send":0,"wait":327,"receive":0,"ssl":679},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"fcl.xueyuxingfeng.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/p8cgcy8sfydtc7qtdoi2u0wr327zl3.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/p8cgcy8sfydtc7qtdoi2u0wr327zl3.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 173549\r\nLast-Modified: Fri, 14 Jun 2024 06:35:41 GMT\r\nConnection: keep-alive\r\nETag: \"666be4bd-2a5ed\"\r\nExpires: Mon, 05 Jan 2026 01:52:51 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173549,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 300","md5":"35956a219c98627cecdff805017b730b","sha1":"080b88857097d0cd356fca8e3b5ca0f8519020d3","sha256":"5ff4a15e90ecbc791756db3c6ad32affa721c28e1aea8e2180e4b5ed6a75da0f","sha512":"848a6ad466ae49b57f796a885c13c4547e8a7bc2637ec7c095d0170448be10fcc4e1235077866e5eabe448f72e4a786c9422d8dc5568084e9b8c289552fb5c94","ssdeep":"3072:xswUI1l1X5cGTyIsm3r4w6S4C9fHuD4pVXX+36mKCtZkwlswiJMM:qdIxXVjsm3rX6OHXX26mdteG3iCM","tlshash":"3e041304dcd2d8236406d6e85cd209c9a25c24f53fbde277ba8af710b991c9d286e53e","first_seen":"2024-03-04T00:55:07Z","last_seen":"2026-07-12T23:53:42.583809Z","times_seen":1085,"resource_available":false,"data":null}},"time_used":3914,"timings":{"blocked":945,"dns":9,"connect":314,"send":0,"wait":625,"receive":1382,"ssl":635},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"89tongji.com/matomo.js","fqdn":"89tongji.com","domain":"89tongji.com","tld":"com"},"ip":{"addr":"94.156.119.89","port":80,"asn":211895,"as":"Serverius Holding B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.332Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: 89tongji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 67972\r\nLast-Modified: Tue, 21 Oct 2025 20:35:55 GMT\r\nConnection: keep-alive\r\nETag: \"68f7eeab-10984\"\r\nExpires: Sat, 06 Dec 2025 02:52:50 GMT\r\nPragma: public\r\nCache-Control: max-age=3600, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-08-12T23:02:32.908721Z","times_seen":17907,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":17,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/js/slider.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.942Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/js/slider.js HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: application/javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4121,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"961b52f45bfbba752034c13d400edc83","sha1":"117b441ed59cc65033541edce352b0988e897195","sha256":"96436f75d2c5f3d02cd897d5a2561b0da7e0e28ff7cd457c992fe6488d002bb9","sha512":"198aa77457eff1d9f1e3f92427fc52fb0e4360c52d4b6c2deccc0f210e5b81ec8a1ebd34f33c3ec6744973c61d04c7d8c986850afcbcafa817743bc0b8cefb84","ssdeep":"48:W50FMDgGxpKud94HGiZu8IxOiLAGxzkFOtdMdWyq:k0aDtxhdoI8iLEOjyq","tlshash":"3f819c0855b23764c46731bcabdfc818963b92176c0eaa44789c97c54fd402ce6ebbf8","first_seen":"2023-04-09T12:34:40Z","last_seen":"2026-07-22T15:39:46.6545Z","times_seen":66,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":146,"dns":1,"connect":170,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/list.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.943Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/list.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/list.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":946,"timings":{"blocked":736,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180515/5afaa08add40a.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.947Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180515/5afaa08add40a.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180515/5afaa08add40a.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1146,"timings":{"blocked":944,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180511/5af53f1eec82e.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.948Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180511/5af53f1eec82e.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180511/5af53f1eec82e.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1140,"timings":{"blocked":942,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/lx.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.670Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/lx.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:49 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/lx.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1881,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"89tongji.com/tj.js?id=26","fqdn":"89tongji.com","domain":"89tongji.com","tld":"com"},"ip":{"addr":"94.156.119.89","port":443,"asn":211895,"as":"Serverius Holding B.V.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"89tongji.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Oct 2025 08:05:06 GMT","end":"Sun, 18 Jan 2026 08:05:05 GMT"},"fingerprint":{"sha1":"1E:77:BF:04:A2:7E:6D:6C:BF:DC:62:94:BB:4E:E2:45:25:A4:E6:91","sha256":"0F:E0:92:B0:20:82:27:A0:0B:D4:ED:30:8A:B4:E5:26:FE:EF:F5:1A:6A:93:D9:2B:5E:19:AC:A0:51:28:D8:38"}}},"request":{"raw":"GET /tj.js?id=26 HTTP/1.1\r\nHost: 89tongji.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 533\r\nLast-Modified: Mon, 20 Oct 2025 10:41:42 GMT\r\nConnection: keep-alive\r\nETag: \"68f611e6-215\"\r\nExpires: Sat, 06 Dec 2025 02:52:50 GMT\r\nPragma: public\r\nCache-Control: max-age=3600, public\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (532)","md5":"2f07ff5c725cf522be1b083a9b6f5336","sha1":"b0ffdc146c81f8f338c360caf95bc9ee4576fc2c","sha256":"b9c04e61073b0a84b5a410332017bc6c50fd1a123e95fc96b51f5c15b4eca565","sha512":"0a1aace160ca503acee8c1665063f5e03bc18b6799bbd69ddf070b1c0edff1c384a98f566eceab859bc2f3db39c1530e35d6143642adaee00e50ba4b25916826","ssdeep":"","tlshash":"3df020101d9f6efc2129217b2dbccd7e33bf342ea0a1c0407e80d41565f2ac189483c8","first_seen":"2025-10-20T21:30:04.145942Z","last_seen":"2025-12-17T06:35:43.56554Z","times_seen":774,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":17,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/banner/5ce6551cdd40a.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.959Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/banner/5ce6551cdd40a.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/banner/5ce6551cdd40a.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15708,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":720,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180515/5afaa08add40a.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.112Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180515/5afaa08add40a.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1909,"timings":{"blocked":1909,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180523/5b04ba317a120.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.330Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180523/5b04ba317a120.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/navbg.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.614Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/navbg.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/navbg.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1108,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/css/css.css","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.936Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/css/css.css HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/css;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13041,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"05533652db2fb4d035825c8d89ac3f0b","sha1":"d45a53907f2ac54c270a5413088d97553fc81a6f","sha256":"e2c4f4d5f411316af9c8ebf0f81780c6ead52473e3ff6a41c472acfb069ed590","sha512":"6847432573df01bd26e53dd81768da53462ab4d9279fd7ca9cf53fc90629a54c0b5379a91d3e51170b1aecead10053d5cb289e602a3722d250d9508717e0ce75","ssdeep":"384:nre8VFNqWDv/7AeWMau/SIdBMBZvyadXSL4:rFAu/ZL4","tlshash":"eb425627abb12c86f01a55a8ff559f54a70f5017ae4e0ef9f5683a6cc2c90d016b378c","first_seen":"2025-12-06T01:53:26.19643Z","last_seen":"2026-04-02T10:33:58.849908Z","times_seen":3,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":152,"dns":1,"connect":172,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180511/5af53f1eec82e.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.096Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180511/5af53f1eec82e.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T01:52:46.421Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":18738,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1394)","md5":"18aa8eafb6c1918250f21d14faec1282","sha1":"f5dd36fef108604c39ccb7f42d2ab45fd7683195","sha256":"50deec4bc961361f43a484e6d4232da7a40fdfa86886c0406c4f441acb5fbcf0","sha512":"349e95982a76768aaa9fa21ab213babdc7cb8d4a441de091c4c0bbfc3e422d03833f86ae7879434e054dffe56646dee9c83206df0062738d399fd2efde2682ca","ssdeep":"384:iwbGKs7KwKnCCJaoHxa+DAwULIzY3wARNgMzWRwxIIHz+d:HbbsqJaWa4AwU0c87Rwed","tlshash":"6882411647ed4f670a3a13cd58a8661db4836a77e5270a0371bfb889bfc5f4a4d0209f","first_seen":"2025-12-06T01:53:26.198455Z","last_seen":"2025-12-06T01:53:26.198455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":172,"dns":1,"connect":173,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20250804/68904ad5711a4.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.946Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20250804/68904ad5711a4.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20250804/68904ad5711a4.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24572,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":739,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e464cbaeb9.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.953Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e464cbaeb9.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e464cbaeb9.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1340,"timings":{"blocked":1136,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e45c6a037a.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.956Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e45c6a037a.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e45c6a037a.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1350,"timings":{"blocked":1142,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e432dc65d4.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.957Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e432dc65d4.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e432dc65d4.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12199,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e432dc65d4.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.701Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e432dc65d4.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 30 May 2018 06:22:36 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0dedb99def7d31:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 12199\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":12199,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=120, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=120], progressive, precision 8, 210x70, components 3","md5":"5f4d2eb10782fe21ac5682307be043ff","sha1":"ef08bccdc62b05a4804655a26eb5a9fd017c4def","sha256":"5997ea65f2254ef3eec8ebcb1d3c0a7a025c44f42981acb96d60afe60a5c6c1f","sha512":"b2f5314821bbbfdfa36d335aba84a732d13ff22735d949324a88dafd8a2922101942e42cf57f835963afb6521ce93bc2c39a74b4942160f209c8f56c5568ad92","ssdeep":"192:+j9TSrniatbj28y4lDAEmJTSrniatblpknls+CULJJxFMAZXXSgoeb1:C6pbKPiUkpbonlsLULJTqAZD","tlshash":"2a422922b700dee3f0f4423980d6cb9b96219d84b29369d3798d2905bfb2be25c1c356","first_seen":"2025-12-06T01:53:26.204195Z","last_seen":"2026-06-29T23:50:02.243161Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":874,"dns":0,"connect":0,"send":0,"wait":250,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/n_w.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.664Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/n_w.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/n_w.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1670,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/iwv840mvscz87ws4p3324p7k2i4yuh.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/iwv840mvscz87ws4p3324p7k2i4yuh.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:52 GMT\r\nContent-Type: image/gif\r\nContent-Length: 156427\r\nLast-Modified: Thu, 04 Nov 2021 19:43:48 GMT\r\nConnection: keep-alive\r\nETag: \"618437f4-2630b\"\r\nExpires: Mon, 05 Jan 2026 01:52:52 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 47, 8-bit/color RGBA, non-interlaced","md5":"0dc662bab3fb9dd17ae6f777eae62a0d","sha1":"084f96c8fe5f280844b43235d6137626b11eabf8","sha256":"1d551f0660ef7472997f772901485f85cabf9370b1ea54334dc09ad4f08301e9","sha512":"2a3341c10473717959d703be8c56ba3fa6b5979d020e162c81ef9a02c6559e4ecf5302c14261722c37d7370d05ea95cfd20191e5e92e02c25ddbd37af23f29eb","ssdeep":"3072:lHavYLzuBktXdAkB+aAXW/xMqbirMklbd0dOmvw+swTFT9orAMI:dawLzdckBWWZQrMYbd0/w+XTpbMI","tlshash":"0be31296a119c02856fe25d2145e18394a8d2064ffb30e6ee43cf8fdc1ba5a71fa0d99","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-06-07T06:12:34.765965Z","times_seen":2257,"resource_available":false,"data":null}},"time_used":3921,"timings":{"blocked":2612,"dns":0,"connect":0,"send":0,"wait":328,"receive":981,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e4308af79e.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.704Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e4308af79e.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 30 May 2018 06:22:00 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0b46684def7d31:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 17761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":17761,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=473, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1024], progressive, precision 8, 210x70, components 3","md5":"978d16a6c35268ab3b16750ddeb9b409","sha1":"cb804d0ef0d6c0712cbf3273600e805af9a26560","sha256":"a9c1ef05dd81c2b960fe0bc3a7a81086623f25ca1510b0893abfa4d645eb1d98","sha512":"bf51781a1b955b60ccc054863835881ea5de3de70ec56399f0634f723b4fde57e02a6116e43059fe5f8528f674638057abff2a9fa2eed2b014b716e82076b8e2","ssdeep":"384:TxVbqZ5EPYJxVbqZ5pnpQsCNxYUnILVEn5njz:VVYCPWVYTpCku35njz","tlshash":"3c827e38fb85ee22fed0127a54a5c3c3c720cc64a76b5a9379ce69013b776a09c5d253","first_seen":"2025-12-06T01:53:26.207849Z","last_seen":"2026-06-29T23:50:02.281418Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1478,"timings":{"blocked":-1,"dns":364,"connect":296,"send":0,"wait":286,"receive":554,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/cont5_listbg.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.662Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/cont5_listbg.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/cont5_listbg.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/more.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.657Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/more.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/more.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4335,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180523/5b04ba317a120.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.956Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180523/5b04ba317a120.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180523/5b04ba317a120.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1353,"timings":{"blocked":1145,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e431b3567e.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.957Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e431b3567e.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e431b3567e.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15122,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":509,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20250804/68904ad5711a4.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.923Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20250804/68904ad5711a4.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Mon, 04 Aug 2025 05:53:24 GMT\r\nAccept-Ranges: bytes\r\nETag: \"eb525b1745dc1:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 64067\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":24572,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 720x540, components 3","md5":"8d871d4ee56e76a76212f5a4f4529a61","sha1":"5bce5e70da75dd2bc1d504b5de3f73152cd7f0f9","sha256":"7180a6a9de329c36e63dde9d1aef32cf611c4cbc41e657dafcbf505185225e9e","sha512":"396c3276a03b4b26cb789e24f15fabefeb7501047092819731753e2003c6c0b37bd7bd0a88293b3fd6d5010c93106e94a6885ca490c6aa36b95ec59819d4308b","ssdeep":"384:w8X6HU/OS1IckK6f1BN4Jadj51BnIRVVGPYyrW77LsCpRcydsnlZuNf:w8Z/B6c81BN4Wj5YNGwCULnRhIO","tlshash":"21b29bb4f3dbe785b767126da63ebeb70bc988c5a1d25913509b4e194081ff8a08343c","first_seen":"2025-12-06T01:53:26.210447Z","last_seen":"2025-12-06T01:53:26.210447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2100,"timings":{"blocked":1590,"dns":0,"connect":0,"send":0,"wait":296,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fuwanjia666.com:33888/fcl.php?keyword=ok138cn%E5%A4%AA%E9%98%B3%E9%9B%86%E5%9B%A2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026from=pc\u0026originUrl=http%3A%2F%2Fwww.muhammedmastar.com%2F\u0026referer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026v=10182","fqdn":"fuwanjia666.com","domain":"fuwanjia666.com","tld":"com"},"ip":{"addr":"143.92.57.57","port":33888,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"fuwanjia666.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 10:23:49 GMT","end":"Sun, 25 Jan 2026 10:23:48 GMT"},"fingerprint":{"sha1":"D8:24:3C:D9:39:8C:11:95:A3:80:FC:F2:80:50:A4:53:C2:84:D8:A2","sha256":"60:D4:A4:50:DD:62:38:61:C9:A8:60:5D:C9:7D:BE:35:DC:31:6A:25:5B:58:05:F5:C7:8B:1F:CA:C2:85:43:A0"}}},"request":{"raw":"GET /fcl.php?keyword=ok138cn%E5%A4%AA%E9%98%B3%E9%9B%86%E5%9B%A2%E5%AE%98%E7%BD%91(%E4%B8%AD%E5%9B%BD)%E8%82%A1%E4%BB%BD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E5%AE%98%E7%BD%91\u0026from=pc\u0026originUrl=http%3A%2F%2Fwww.muhammedmastar.com%2F\u0026referer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026v=10182 HTTP/1.1\r\nHost: fuwanjia666.com:33888\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://www.muhammedmastar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:49 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.41\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2860,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1846), with CRLF line terminators","md5":"65155a6f0fc48e31dbd3d8721d839c13","sha1":"6460be944f7f582fb7994e158b6d1caba1978c2d","sha256":"bdc0400fdaeed21318771137cb0831665fc84987253e622cd31794517fc1ccbe","sha512":"40fe188e008c0e9e2b8618ebd86fc249caa4964f95fa956086efb7a4bdb6274030221b6bdf530dfdb33e0338cc4bcd5fec64409434f836aa11350f6614dc70ae","ssdeep":"","tlshash":"e351336386c8910f8e61e088d234faea5953282fcf73ac57fe2461dfd6054ea89430cc","first_seen":"2025-12-06T01:53:26.212453Z","last_seen":"2025-12-06T01:53:26.212453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":58,"connect":323,"send":0,"wait":340,"receive":0,"ssl":657},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/ad_ctr.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.648Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/ad_ctr.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/ad_ctr.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3743,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e462a40d99.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.736Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e462a40d99.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 30 May 2018 06:35:22 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0316e62e0f7d31:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 17374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":17374,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2018:05:30 14:11:49], progressive, precision 8, 210x70, components 3","md5":"a67e0fe59484d4240178a6a5c2a3e0f7","sha1":"0f1d91e87cc369923ab9504036aa9d52eaf523f5","sha256":"2bfbdfba083bf6298f6ee1ffc01455e7ad9f85cac0591a472d8e65c05ab41094","sha512":"559fe9cb9155ecde4d83c2e5ccc936790bb17b6d7082036d83225a2eb45e8f56a0cada98ce19b07595b06d7591d46a3b08c1d6084bb6f94e39af5ad77ffcabe5","ssdeep":"192:1p82421TFKqr28y4lPXm582421TFKqmTknglNaewIkidrFC6oflklbv7iWwK5fDr:1Fr1hUPiEr1hdnglgewIkibbpXwKVH","tlshash":"a6726d29bb628e17fcf99271d9e5e28307254cc8a6a32a41788c6549bf737f19c1c607","first_seen":"2025-12-06T01:53:26.214435Z","last_seen":"2026-06-29T23:50:02.24713Z","times_seen":3,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":542,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e4698501bd.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.952Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e4698501bd.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e4698501bd.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1350,"timings":{"blocked":1141,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180511/5af543b5af79e.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.916Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180511/5af543b5af79e.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 05 Jul 2018 06:04:47 GMT\r\nAccept-Ranges: bytes\r\nETag: \"80698e132614d41:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 98924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":27490,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=540, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=720], progressive, precision 8, 720x540, components 3","md5":"cfab284075099970f096e3dabf248dfe","sha1":"8e9315876960a61b6ecd7e18f336138131e7d8c8","sha256":"d2c413b6e91c705115cd6e1f0c7779b921b64c4c102858c26a47ebdde29510c9","sha512":"b47a7c65ed014f4464e509f596412db87cc652fb2ea7cc4e86efb993d38ed2db70416749404f56fd2431633279e2c351fcccf1db5f6bab94a82d87260a59c6f3","ssdeep":"384:vWZxJDoRPi3ZxJDoWns4Ape8OZ81MwHFmvU2ZrhGGxr7H+vKnF/4:vuxJ0RPKxJ0Wj8yEhH4vUK9dJ7t4","tlshash":"42c2cf26a7835d77f5d8123b44e3d3175312af1883d35462788c6546bbb36a22f6cf82","first_seen":"2025-12-06T01:53:26.216527Z","last_seen":"2025-12-06T01:53:26.216527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2106,"timings":{"blocked":1585,"dns":0,"connect":0,"send":0,"wait":324,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180515/5afaa051e1113.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.919Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180515/5afaa051e1113.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 02 Jul 2019 08:01:03 GMT\r\nAccept-Ranges: bytes\r\nETag: \"8091d4bac30d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 107324\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":23110,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=540, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=720], baseline, precision 8, 720x540, components 3","md5":"daf6a0eb547c4f802a82d15ddda54d54","sha1":"c75088683ae95911ea2deaefcbd8df65fb35deed","sha256":"751819dfaa0c9f0ce75561d4aae620e3901d9055afdf430649c6ba05619cbf53","sha512":"ce81be7b11be10849419476271d89eeee975a1339ba2be469b4b6150b7195488ab8529ef56f1e8ef72ae64c2bba045645f864cf8d158eb3e8179d14bd50dbada","ssdeep":"384:bcPifGnQZP+/PKtJ9vHPa7bBfwsEzE5ONBY1620bk/oU:oP0GcmC/Pwus+zY1X0bsn","tlshash":"24a215555ab1bb02ec51083817e12aeb021c6d1f0ae213097cadee4f7362ddb75afd42","first_seen":"2025-12-06T01:53:26.218289Z","last_seen":"2025-12-06T01:53:26.218289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2101,"timings":{"blocked":1625,"dns":0,"connect":0,"send":0,"wait":339,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e477af0537.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.950Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e477af0537.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e477af0537.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1148,"timings":{"blocked":945,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e4672af79e.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.952Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e4672af79e.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e4672af79e.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1340,"timings":{"blocked":1140,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/combg.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.659Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/combg.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/Public/css/css.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/combg.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4260,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/lx.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.219Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/lx.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:56 GMT\r\nAccept-Ranges: bytes\r\nETag: \"5c8198bd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 1881\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"6ee3a2aa0813de6d95557868a5708bd5","sha1":"11c526214337aa3c4239cb41a39777d3ef7d885b","sha256":"218f69c3064a5f06d26c893746e1c72c442d7f36c716430d0eb40d3d47624d3d","sha512":"21511a3dc7c0e95275b7a9db4034ccff004934621456b1a584b056d557cb4953e05a3fbe89342eb81ef0eb082a0c54b6e60d1cb26232244be24ccec125281796","ssdeep":"","tlshash":"5941f7ceddc1ac01714c99d610a641a7ab9a4c50cfa0b4a7adca980738532ff59be1cf","first_seen":"2025-12-06T01:53:26.220443Z","last_seen":"2026-06-29T23:50:02.272278Z","times_seen":5,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180523/5b04b870cdfe6.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.951Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180523/5b04b870cdfe6.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180523/5b04b870cdfe6.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1352,"timings":{"blocked":1144,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e431b3567e.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.698Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e431b3567e.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 30 May 2018 06:22:18 GMT\r\nAccept-Ranges: bytes\r\nETag: \"049218fdef7d31:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 15122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":15122,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=107, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=300], progressive, precision 8, 210x70, components 3","md5":"0e02391592348c481fb44d5eb1490c81","sha1":"842298a24a59bb72c2072b8a6cced8ad76f94053","sha256":"ffc9e7cf82884c8d6fd94ffa3592203b2da426f71b798292abecaef6e2d6c2cd","sha512":"d5c943a0e4892104cf369bc2364ee2b15771322247821d400e122a98236e0b36d77461dd588da6ae7be9eca985c7e83297623bd030167a18e106eb40c3bea134","ssdeep":"384:Sr0zsxf7Dq5DpPiSr0zsxf7Dq5DknKsXEsZMFMJotL:SIYxf7DqjPfIYxf7Dqu1XEj+SV","tlshash":"47625b0e7b45af02fed417b9d5a6c693a761af80e3135603bacc311a77763c1ac98217","first_seen":"2025-12-06T01:53:26.222088Z","last_seen":"2026-06-29T23:50:02.244392Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2241,"timings":{"blocked":665,"dns":371,"connect":297,"send":0,"wait":306,"receive":602,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/jh.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:47.906Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/jh.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:56 GMT\r\nAccept-Ranges: bytes\r\nETag: \"3bf579bd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 3828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":3828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, interlaced","md5":"d72f9a636058fb2b7d65647ba6b7c2db","sha1":"e6054aa32c296a8fcb105162f0d858a9035f1bd8","sha256":"1d89de4fc93d6195de7654dda93f780bdec682a9b43b0122b7fd6cc3ff3325e7","sha512":"eaf5240c2c59b7f001855e34e67351fed42077200c92854da0910103c53aa079838fddd24d7706bf281a5c1f7a0b741220a0acf2af3eed589eecdfcd9a760158","ssdeep":"","tlshash":"67813c4df84165411a4e59d634ffc4074a36cb8492a47e29aace802f46388b13c35bdb","first_seen":"2025-12-06T01:53:26.223947Z","last_seen":"2026-06-29T23:50:02.285974Z","times_seen":5,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":161,"connect":279,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/tel.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.841Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/tel.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:57 GMT\r\nAccept-Ranges: bytes\r\nETag: \"72c136be3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 2475\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"b3d5ebe643d244f9fec4bdaf957c2d4d","sha1":"9b96625c0167ec4cbe1795ee01f23a0ab47fa2a3","sha256":"fa8ef60b8dc184680837ff11ff8f4f036491256808fc9409225de6ddbed1e668","sha512":"10acb12b5ff897e97657994a42e0796735dc0d66111d3df0947adf306fcaa3a5854dacb76d8b7d11b3cea17e08c84d0c214eca7e95919ab31cf673ad04c0ea1a","ssdeep":"","tlshash":"2951e78afc46bc619ac9aac73eea812f9d750de08ac2459475c6c953083149d086d9ce","first_seen":"2025-12-06T01:53:26.225655Z","last_seen":"2026-06-29T23:50:02.287028Z","times_seen":5,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/combg.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.043Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/combg.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:55 GMT\r\nAccept-Ranges: bytes\r\nETag: \"18c89bbc3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 4260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":4260,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 30, 8-bit/color RGBA, interlaced","md5":"801bbf81b7d9ccc0d976349d558d3186","sha1":"a8cba540f57ff6ee77e2a963c9edbe4ed384b007","sha256":"ae167a639b546a027b192822eb3c46c3130567c246cc5837b4802f6b82e0355e","sha512":"7a6603ccf267783c831a8bc2719a4f44fb22c1225b873bfa2818845d650b6fa4f8e94348cb4b25474d870015fa6caf9c5242582c711d1e3c41be65f875eacf4d","ssdeep":"96:mllcHitlIxv9vk7C1+I4wWHLihk/xRo7F52OGrV6rysu:lIIHUCD4waw7FlYoysu","tlshash":"9f915d88e8840c42104d899934fbd5578e26d5d0c284fe14bfdf815e4a20d622cb9eef","first_seen":"2025-12-06T01:53:26.22741Z","last_seen":"2026-06-29T23:50:02.257719Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":980,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/images/alpha.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.940Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/alpha.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/images/alpha.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":924,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":526,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/banner/5ce6428a9ca41.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.620Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/banner/5ce6428a9ca41.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/banner/5ce6428a9ca41.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131807,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/n_w.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.045Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/n_w.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 23 May 2019 07:32:57 GMT\r\nAccept-Ranges: bytes\r\nETag: \"12d9c6bd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 1670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1670,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 35x40, components 3","md5":"6c7a7324feccef45610114adad5a88ba","sha1":"2a58792b841fa5807f8c538f4d6de173b35955c0","sha256":"d51e4bd011b7b27b472680761a722d36aaca194392978969a978d2e44f6e8a99","sha512":"36f784512c0aa2095833acb79d63ee9b952cd311e553485c0a2c88cc7dabade01c0ec26bad8b7ef88a7b3664aede794c3f083abe34fe9a7fa5cd673436530ce2","ssdeep":"","tlshash":"fa31a60dba801f02d5e4a5b418fba8b70e254d40fca0f12764f5dd3638221f922059c5","first_seen":"2025-12-06T01:53:26.229326Z","last_seen":"2026-06-29T23:50:02.282444Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1592,"timings":{"blocked":1315,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/ndo5u75d8mk1is8ldrdhiw1h429tnk.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/ndo5u75d8mk1is8ldrdhiw1h429tnk.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 458771\r\nLast-Modified: Tue, 11 May 2021 11:49:00 GMT\r\nConnection: keep-alive\r\nETag: \"609a6f2c-70013\"\r\nExpires: Mon, 05 Jan 2026 01:52:51 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458771,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 300","md5":"70f984740f0767b3a77491391f9fd051","sha1":"315ee281e1f8d78a98c9495ae21a85620f52365e","sha256":"8ca0d1746eea53fd71559c3903ea72e3c7020cbd546667c32511257fdc53dff6","sha512":"6a3c8cd2ceca01d278bc2affca199747c7c1c2318ac74f67bfbfed3027c9fec60102c513c1460edef51b9e6d0d0c4dcea3ade2b62c66f9b9a22960fab7769c59","ssdeep":"12288:LKGXVMvoygGLsJBQQNIqwVYHLMuJNEJnSftlyTAUozFb:hXWVhkFweLMuqSVI36","tlshash":"9ea42312575a395c0ab3a8e35c26ff8b4d35a1962322f03aa30fe57fd4404e794b6763","first_seen":"2023-10-31T02:49:06Z","last_seen":"2026-06-07T06:12:34.767291Z","times_seen":2080,"resource_available":false,"data":null}},"time_used":4347,"timings":{"blocked":1653,"dns":0,"connect":0,"send":0,"wait":362,"receive":2332,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/jquery.min.js","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.933Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 726\r\nLast-Modified: Tue, 19 Aug 2025 11:53:57 GMT\r\nConnection: keep-alive\r\nETag: \"68a465d5-2d6\"\r\nExpires: Sat, 06 Dec 2025 02:52:47 GMT\r\nCache-Control: max-age=3600\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":726,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (725)","md5":"860a90b0212d8615304d18bf31252cc2","sha1":"a3a97c292481b400ec6416363a965dfbd304d895","sha256":"4fb0a7c042e5c2631d36a50d1770e98156729e6a6214aa797ae1fb6c1d31d6d8","sha512":"d14ba6137c010701f8b40aeb61d6494d935f7d776ef1a006f6833e66d76e9e6f9bc29e6bd96163bd6146c87364b0e4161f2d3bda951634d548f428a6646ca047","ssdeep":"","tlshash":"a501fbe887c4d85b7edc5d43ea14eeca21b2813ba7d971838328fa8c05a9552c59c449","first_seen":"2023-03-13T03:06:36Z","last_seen":"2026-08-09T10:49:05.603678Z","times_seen":352,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/logo/5ce63f8eec45d.png","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.940Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/logo/5ce63f8eec45d.png HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/logo/5ce63f8eec45d.png\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":20501,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":527,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180523/5b04b870cdfe6.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.323Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180523/5b04b870cdfe6.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/banner/5ce6429a0cdfe.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.839Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/banner/5ce6429a0cdfe.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/jpeg\r\nLast-Modified: Thu, 23 May 2019 06:50:00 GMT\r\nAccept-Ranges: bytes\r\nETag: \"c59132be3311d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 125689\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":125689,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x550, components 3","md5":"4a7c0ff7264157709bf7463484d40c88","sha1":"bb4c8f6f718741e3e11a1d0207e24678698d7c4f","sha256":"cf7c9940418228e4aa7625d59470073a618c66378edd7d8f1fe1ebb9b7259baf","sha512":"2c3f265174425546a0c3fbef7a4a6e349640c2f9c1bff486898e6f62b722ec83cc583c22ade296a691397a9d13f0abc20d50c02e20fb5f794925b6631e62bf43","ssdeep":"3072:AeAVWukXTwEv27C89M7yBVwIHtIG4s8b4yaKcmAU:gkfP2W89ZBOytIG4rbgKgU","tlshash":"6bc31219fc69a92df105702c8c6df438944744f929fee814f4ae1debc7c02a79c46a6e","first_seen":"2025-12-06T01:53:26.23423Z","last_seen":"2026-06-29T23:50:02.276894Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":1433,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.muhammedmastar.com/","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T01:52:46.036Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/uploads/20180530/5b0e45c6a037a.jpg","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.328Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e45c6a037a.jpg HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tp.xinxiyidiantong.com:5868/uploads/zdxu27gbnptd1nlnoezm734xiww2lz8gs5rh881c.gif","fqdn":"tp.xinxiyidiantong.com","domain":"xinxiyidiantong.com","tld":"com"},"ip":{"addr":"27.124.44.50","port":5868,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:50.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tp.xinxiyidiantong.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 11:36:35 GMT","end":"Thu, 18 Dec 2025 11:36:34 GMT"},"fingerprint":{"sha1":"42:AC:AC:86:E9:93:0A:FB:BB:4F:2F:69:BC:50:70:0F:13:C8:7F:16","sha256":"D3:F9:F5:85:00:77:6D:E5:3F:0F:A3:CE:E1:E2:AB:55:75:E8:94:D2:40:56:DB:DC:40:D7:30:17:9F:4C:39:3C"}}},"request":{"raw":"GET /uploads/zdxu27gbnptd1nlnoezm734xiww2lz8gs5rh881c.gif HTTP/1.1\r\nHost: tp.xinxiyidiantong.com:5868\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 36274\r\nLast-Modified: Wed, 19 Feb 2020 07:01:50 GMT\r\nConnection: keep-alive\r\nETag: \"5e4cdd5e-8db2\"\r\nExpires: Mon, 05 Jan 2026 01:52:51 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x200, components 3","md5":"7e5d039a1efc18bb7bea97fd777c69af","sha1":"68ef09f74077052dcb97d54c3223d60b3cc8b571","sha256":"49f4dac0c9655023462733d66e03a78de44377c97c6e1c78347a571f93696ba5","sha512":"eb933bd838dfa2cb7b6b4d78b9675ab1243290dba4ab65c49e15ed82e51c10264cc1217ca042cb4d4589c9335f3e03b35788f7c5e982170352fe6c33ffc1cffd","ssdeep":"768:HqqTTVl/XyWz5/SfYem+xeUFFXEBYj5GEeseg5mT25HFwSCJvu0us:Kql5d1iX58UaYXr62X/yvu0us","tlshash":"3df2e1a4a7d09c6cc76715ffdb37f6f0270194709874227a8b982a681d38cf1cae2795","first_seen":"2023-05-06T09:40:17Z","last_seen":"2026-06-07T06:12:34.774385Z","times_seen":1729,"resource_available":false,"data":null}},"time_used":2668,"timings":{"blocked":992,"dns":8,"connect":334,"send":0,"wait":660,"receive":6,"ssl":665},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.muhammedmastar.com/Public/uploads/20180530/5b0e463c6acfc.jpg","fqdn":"www.muhammedmastar.com","domain":"muhammedmastar.com","tld":"com"},"ip":{"addr":"104.252.55.88","port":80,"asn":18779,"as":"EGIHOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:46.954Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/uploads/20180530/5b0e463c6acfc.jpg HTTP/1.1\r\nHost: www.muhammedmastar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.muhammedmastar.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 06 Dec 2025 01:52:48 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: PHP/5.4.41\r\nLocation: http://www.wxshsmj.com/Public/uploads/20180530/5b0e463c6acfc.jpg\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"PHP:5.4.41","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15747,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":1537,"timings":{"blocked":1339,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-06","alert":"Phishing Block","trigger":"www.muhammedmastar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"www.muhammedmastar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/ad_ctr.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:48.859Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/ad_ctr.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:54 GMT\r\nAccept-Ranges: bytes\r\nETag: \"d7e925bc3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:47 GMT\r\nContent-Length: 3743\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":3743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 70 x 140, 8-bit/color RGBA, non-interlaced","md5":"637051a2eab823797425878d0465f1ec","sha1":"342417035017d2c3c344395191f2594ee57d3c6e","sha256":"75719c79e09b810732431eed6a501bd7af196dcb7eb441db92a227c4ef0dacc2","sha512":"ffe1042854ac7f4cbfd3c735ce75603b8d9807eaa71df95081b13a8d4497dced20713526c39831b1021beb7ec4d1e5d7ca1ee68f283056d5de15efa47cbf8ba0","ssdeep":"","tlshash":"ec717d0ee7a23c408a49514668ebc63eeb331480ec50f1fdb58d486c5b89573261ffda","first_seen":"2023-05-19T02:23:13Z","last_seen":"2026-07-19T13:27:51.210611Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1553,"timings":{"blocked":1162,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/imghoverbg.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.029Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/imghoverbg.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:56 GMT\r\nAccept-Ranges: bytes\r\nETag: \"2fac68bd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 1226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 100, 8-bit/color RGBA, non-interlaced","md5":"f78f8dc8505fd504eb619064debcd1bd","sha1":"71192099c4ac40420adc3e5cc69653f19e6689d2","sha256":"59360779f68eabbb9471d7bb6ae22b9388f8db0aeb65e0290c36cb8dd5880d35","sha512":"a315845f82cb5ac015e956e6d4ceb1399cef00152456ace44f400fa966b99ac2299d51e9cb97dbab3c50ac7a7672a6a4529737b7fe5094cbeb1177f74a997ced","ssdeep":"","tlshash":"30210fc8e5416840f74a99b128e3896ff6124da08def717374cac4b19c749b8a22f4df","first_seen":"2025-12-06T01:53:26.238839Z","last_seen":"2026-06-29T23:50:02.256483Z","times_seen":5,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/more.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.025Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/more.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:57 GMT\r\nAccept-Ranges: bytes\r\nETag: \"7efcb1bd3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 4335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":4335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 30, 8-bit/color RGBA, interlaced","md5":"b0ace520c4ba79b256ad738a3c93a534","sha1":"f93ff2a1830f323d963fd60ceaf743ba04c93b3f","sha256":"56c9c37697cefe1bc0f15f515bf2ac87b3e6b02af97138ab164a22cc8d5cddcc","sha512":"25e8b1ff6525c35df00afc8b30969cb38c813ff1e8a992df32477ceed182ea8fc1d4a78878d346456ce6b69ea7a6791d9e400777b4d40a35d7b6a0834b11c760","ssdeep":"96:mllcHitlIxv9vk7C1+I4wWHLihk/xRo7F521akyCPAhik5:lIIHUCD4waw7FF6P6H5","tlshash":"17917d8ae8605441160e8ad538f6d9078b27ee90e2c17d18acdfc10f8574c713d3abdb","first_seen":"2025-12-06T01:53:26.240338Z","last_seen":"2026-06-29T23:50:02.248128Z","times_seen":5,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.wxshsmj.com/Public/images/yuan.png","fqdn":"www.wxshsmj.com","domain":"wxshsmj.com","tld":"com"},"ip":{"addr":"120.132.17.228","port":80,"asn":140292,"as":"CHINATELECOM Jiangsu province Suzhou 5G network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.muhammedmastar.com/","date":"2025-12-06T01:52:49.228Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /Public/images/yuan.png HTTP/1.1\r\nHost: www.wxshsmj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.muhammedmastar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 23 May 2019 07:32:57 GMT\r\nAccept-Ranges: bytes\r\nETag: \"14f36be3911d51:0\"\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: Sat, 06 Dec 2025 01:52:46 GMT\r\nContent-Length: 1068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:8.5","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 30, 8-bit/color RGBA, non-interlaced","md5":"38fa4a5a5ed5de64fa9bee95b012aa68","sha1":"9cdf8f76eb38c92f193055a19a10463c7b32dba5","sha256":"b8ea9886c2f9faf83e2f83b128ee628bd2e1e09dcb3ec2cd85fab907a185145a","sha512":"13eb1d7257001dc05d65de42310f505fbeb876327d1991493eb1c4f37aebc055913fddaa48662091a617c9f2f9a3d8873cf8f0135a312edb7758ee2da0ca04e2","ssdeep":"","tlshash":"7011b98efa816c0166cce4c728e640379d330d80c6e5a49aa8cfdc5b8e300f640199c7","first_seen":"2025-12-06T01:53:26.242128Z","last_seen":"2026-06-29T23:50:02.271447Z","times_seen":5,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}