{"report_id":"3454acfe-85c8-4962-b0c9-dca17378525a","version":0,"status":"done","tags":[],"date":"2026-10-06T21:47:24Z","url":{"schema":"http","addr":"fzkpe.com","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":0,"asn":36352,"as":"HostPapa","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"fzkpe.com/","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"title":"K8.com,k8凯发祝您一路长虹","dom":{"size":151,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"05bf1f2930cb26eb431c27c85e9173c2","sha1":"809ac4aaecdeb01504b6368a794247c84e92e554","sha256":"cf324f9eb205a8e6493c9b903c46498c61ce485ba1d53ef20375910b0cb054cd","sha512":"ba820bdd508aad8a86fedf813269043a1bbd0170609edf6084db195c52e823cc943902618a7ce38b4d5b130a175e2cd2dbe8bb7e283d8de26ae30ebe2a07c02c","ssdeep":"","tlshash":"3fc08c06786f240cab0351c20a873e80d545c332884e48408b82029b70cb427c0c7728","dom_hash":"domhash18da208b3b39949e9ba09528a720f5c0","first_seen":"2025-11-13T13:09:34.198812Z","last_seen":"2026-10-06T22:45:46.960093Z","times_seen":8377,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fzkpe.com","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":0,"asn":36352,"as":"HostPapa","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-10T21:47:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"fzkpe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"fzkpe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"www.7a5twi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"www.7a5twi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fzkpe.com","ip":{"addr":"198.46.196.224","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-10-23","domain_rank":0,"first_seen":"2025-11-21T04:10:59.685495Z","last_seen":"2025-11-21T04:10:59.685495Z","alert_count":10,"request_count":5,"received_data":109401,"sent_data":2541,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.7a5twi.com","ip":{"addr":"207.57.81.199","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-06-24T05:17:16.493559Z","last_seen":"2026-10-03T08:11:38.623321Z","alert_count":2,"request_count":1,"received_data":314,"sent_data":552,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-10-06T20:54:02.662213Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":451,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fzkpe.com/aa.js","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fa500f9c56a5b9545a6f20f977f6c91","sha1":"f5400acae57c3ccb041eada4f7a07cd87ceab0a6","sha256":"35fa3281b34f857044a6b64e14d733ed5a5c623cfd397788efbae0c15d425b21","sha512":"7dd66ea076aa9df7b04676136fcb009620f09613f4cedcdb952b30adda7a7cd99f5daadfa0afcc618f372167e6cac4c9bac52f933ee1030c2e282d1a5bbca562","ssdeep":"","tlshash":"2b21b4be10f2713d83329132f033ad7c2eb84005fb260a24c81c3e1e8498d5208a3c5c","size":1209,"data":"","first_seen":"2026-06-28T23:48:30.05324Z","last_seen":"2026-10-06T21:47:31.426473Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fzkpe.com/?ads/img/juming.jpg","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fzkpe.com/","date":"2026-10-06T21:46:16.249Z","timestamp":1791323176249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fzkpe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:29:45 GMT","end":"Fri, 13 Nov 2026 04:29:44 GMT"},"fingerprint":{"sha1":"02:7A:61:3A:15:4F:28:9C:73:A0:3F:41:1C:24:13:A3:10:9F:54:B3","sha256":"BA:A5:4F:71:5F:89:CB:F9:61:74:0B:7B:4E:C8:F2:22:DC:20:E7:59:9E:2F:86:7A:AD:C9:AF:66:3D:F0:E6:A7"}}},"request":{"raw":"GET /?ads/img/juming.jpg HTTP/1.1\r\nHost: fzkpe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fzkpe.com/\r\nCookie: PHPSESSID=48to90dgq890uuicitfjtjo350\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"48to90dgq890uuicitfjtjo350"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 06 Oct 2026 21:46:16 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100950,"size_decoded":101217,"mime_type":"image/jpg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1333, components 3","md5":"b61a57c343ace3d1ac45537263e1660a","sha1":"b4ed61c04c462e43b4ac808bb3ccaa1d66d5bcaf","sha256":"f58cbc05f95601da6cd6c60e050acadfbd176767002a379da4efe37ae433774b","sha512":"fd2ad6b70e32f5a725019fd4b57fa632d625e1f1062bf3aed934069e807518a3a27b45950fdaffdbca9428734c3324ee3b47fba2f00f6e6fba75c54fe0bcd869","ssdeep":"1536:NBv9vKfX33MqadgryKcexgj8tyBGz3OgNR3/n7p4A2lmXjOupJyBPNUHp73hW:8f3ESeKcewBGz3/6A20XCEJyAJ73hW","tlshash":"b2a31200c36f6a832052a8a8c6a513e5f9c0b6511f40e575f6d66e9b4ee198dccf34af","first_seen":"2026-04-18T07:35:21.890409Z","last_seen":"2026-10-06T21:47:31.415418Z","times_seen":26,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"fzkpe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"fzkpe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.7a5twi.com/mktland","fqdn":"www.7a5twi.com","domain":"7a5twi.com","tld":"com"},"ip":{"addr":"207.57.81.199","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fzkpe.com/","date":"2026-10-06T21:46:16.271Z","timestamp":1791323176271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7a5twi.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:37:7B:99:90:1F:56:62:DE:58:D7:B2:6D:4B:A3:58:67:6F:EC:40","sha256":"00:B9:24:6B:FD:47:C3:F3:07:DB:00:65:5E:7A:7D:3D:56:A9:77:D3:26:49:A8:1C:67:71:E7:7E:3D:56:4F:07"}}},"request":{"raw":"GET /mktland HTTP/1.1\r\nHost: www.7a5twi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fzkpe.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 06 Oct 2026 21:46:17 GMT\r\nserver: Bobby'Server\r\ncontent-length: 159\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":159,"size_decoded":314,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"07f36d44d48e2d2cf2d780aa6495f804","sha1":"3e90020ec732a1bbb0cd23e949266f81c98f7624","sha256":"8caff164cd30f36a8f13fcc423a5500a8fce33ce603883090d91f3c085700f8a","sha512":"e7c713b2eeac20e9178f8ee66245de1deff5de391e764e19823351be4911aeb44207b85c336925518f78e5ae78ba6bc93eaf556571e1d79f2ce89c4ae1ddbd57","ssdeep":"","tlshash":"a2c08c26381e2c0c97a321ba16c36ea0d182c330895e19008780025730cb0168ac3729","first_seen":"2024-08-21T12:55:46.175776Z","last_seen":"2026-10-06T22:45:46.978027Z","times_seen":14546,"resource_available":true,"data":null}},"time_used":1792,"timings":{"blocked":-1,"dns":583,"connect":297,"send":0,"wait":300,"receive":0,"ssl":612},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"www.7a5twi.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"www.7a5twi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fzkpe.com/ads/img/favicon.ico","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fzkpe.com/","date":"2026-10-06T21:46:18.010Z","timestamp":1791323178010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fzkpe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:29:45 GMT","end":"Fri, 13 Nov 2026 04:29:44 GMT"},"fingerprint":{"sha1":"02:7A:61:3A:15:4F:28:9C:73:A0:3F:41:1C:24:13:A3:10:9F:54:B3","sha256":"BA:A5:4F:71:5F:89:CB:F9:61:74:0B:7B:4E:C8:F2:22:DC:20:E7:59:9E:2F:86:7A:AD:C9:AF:66:3D:F0:E6:A7"}}},"request":{"raw":"GET /ads/img/favicon.ico HTTP/1.1\r\nHost: fzkpe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fzkpe.com/\r\nCookie: PHPSESSID=48to90dgq890uuicitfjtjo350\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"48to90dgq890uuicitfjtjo350"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 06 Oct 2026 21:46:18 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6a39370f-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-06T23:42:16.824424Z","times_seen":333882,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"fzkpe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"fzkpe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fzkpe.com/","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-06T21:46:15.049Z","timestamp":1791323175049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fzkpe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:29:45 GMT","end":"Fri, 13 Nov 2026 04:29:44 GMT"},"fingerprint":{"sha1":"02:7A:61:3A:15:4F:28:9C:73:A0:3F:41:1C:24:13:A3:10:9F:54:B3","sha256":"BA:A5:4F:71:5F:89:CB:F9:61:74:0B:7B:4E:C8:F2:22:DC:20:E7:59:9E:2F:86:7A:AD:C9:AF:66:3D:F0:E6:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fzkpe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 06 Oct 2026 21:46:15 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=48to90dgq890uuicitfjtjo350; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"48to90dgq890uuicitfjtjo350","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=48to90dgq890uuicitfjtjo350; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3253,"size_decoded":2028,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (879), with CRLF line terminators","md5":"b9757edfaa364a03c4fa6c144f876a4b","sha1":"4afdce853643ff15f3288e29667701b6746632b6","sha256":"365f7160d602ee73a94dc13d3d638a3cd67be294093b95e84ecb73df99a574a5","sha512":"fa4bd38745e4e67d8bdf866ec8041df59bcae3fc6b1fc0a2961437a29c09531ed69f6074f4812b713c3b727487e00c4ac45dec8d761034f4b352c32f22f785e8","ssdeep":"","tlshash":"2b61706a1a401d0e03128339f131fb8ec585b5c8ad97d880f4fcaa8b6fc0b69cc4724a","first_seen":"2026-10-06T21:47:31.423905Z","last_seen":"2026-10-06T21:47:31.423905Z","times_seen":1,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":81,"connect":159,"send":0,"wait":203,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"fzkpe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"fzkpe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fzkpe.com/aa.js","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fzkpe.com/","date":"2026-10-06T21:46:16.010Z","timestamp":1791323176010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fzkpe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:29:45 GMT","end":"Fri, 13 Nov 2026 04:29:44 GMT"},"fingerprint":{"sha1":"02:7A:61:3A:15:4F:28:9C:73:A0:3F:41:1C:24:13:A3:10:9F:54:B3","sha256":"BA:A5:4F:71:5F:89:CB:F9:61:74:0B:7B:4E:C8:F2:22:DC:20:E7:59:9E:2F:86:7A:AD:C9:AF:66:3D:F0:E6:A7"}}},"request":{"raw":"GET /aa.js HTTP/1.1\r\nHost: fzkpe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fzkpe.com/\r\nCookie: PHPSESSID=48to90dgq890uuicitfjtjo350\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"48to90dgq890uuicitfjtjo350"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 06 Oct 2026 21:46:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 27 Jun 2026 08:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3f83e2-4b9\"\r\nexpires: Wed, 07 Oct 2026 09:46:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1209,"size_decoded":1030,"mime_type":"application/javascript","magic":"ASCII text","md5":"5fa500f9c56a5b9545a6f20f977f6c91","sha1":"f5400acae57c3ccb041eada4f7a07cd87ceab0a6","sha256":"35fa3281b34f857044a6b64e14d733ed5a5c623cfd397788efbae0c15d425b21","sha512":"7dd66ea076aa9df7b04676136fcb009620f09613f4cedcdb952b30adda7a7cd99f5daadfa0afcc618f372167e6cac4c9bac52f933ee1030c2e282d1a5bbca562","ssdeep":"","tlshash":"2b21b4be10f2713d83329132f033ad7c2eb84005fb260a24c81c3e1e8498d5208a3c5c","first_seen":"2026-06-28T23:48:30.05324Z","last_seen":"2026-10-06T21:47:31.426473Z","times_seen":18,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"fzkpe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"fzkpe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fzkpe.com/?ads/css/base.css","fqdn":"fzkpe.com","domain":"fzkpe.com","tld":"com"},"ip":{"addr":"198.46.196.224","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fzkpe.com/","date":"2026-10-06T21:46:16.012Z","timestamp":1791323176012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fzkpe.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 04:29:45 GMT","end":"Fri, 13 Nov 2026 04:29:44 GMT"},"fingerprint":{"sha1":"02:7A:61:3A:15:4F:28:9C:73:A0:3F:41:1C:24:13:A3:10:9F:54:B3","sha256":"BA:A5:4F:71:5F:89:CB:F9:61:74:0B:7B:4E:C8:F2:22:DC:20:E7:59:9E:2F:86:7A:AD:C9:AF:66:3D:F0:E6:A7"}}},"request":{"raw":"GET /?ads/css/base.css HTTP/1.1\r\nHost: fzkpe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fzkpe.com/\r\nCookie: PHPSESSID=48to90dgq890uuicitfjtjo350\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"48to90dgq890uuicitfjtjo350"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 06 Oct 2026 21:46:16 GMT\r\ncontent-type: text/css;charset=gbk\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2362,"size_decoded":1231,"mime_type":"text/css; charset=gbk","magic":"ASCII text, with CRLF line terminators","md5":"a5ac33feaea2a2f90fd65f814056a9d7","sha1":"aa23e482a58e8d2507acee9c23dbabc06accfdb1","sha256":"cbdf726737eb36cc6ba48b4c750078e812dbd8cbc50d5d2006755c251c535682","sha512":"09145856a17f02b8ce483e9e5841e90f1607f81a1e048d0cf8ecb4728caeff98034ed68ceb92926957c9b36a07aeaa6b32a9c6b05488ca5b28a987cf3de6fe88","ssdeep":"","tlshash":"2241433b56421324f113db66a2cca6acae6fd013f2134778b972a716c4875571273784","first_seen":"2026-01-21T15:04:39.990909Z","last_seen":"2026-10-06T21:47:31.42722Z","times_seen":32,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-06","alert":"Phishing Block","trigger":"fzkpe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"fzkpe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fzkpe.com/","date":"2026-10-06T21:46:16.244Z","timestamp":1791323176244,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fzkpe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-06T23:41:02.352983Z","times_seen":18898773,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}