{"report_id":"351d54db-15ac-4cd2-beb1-cd7524005e75","version":6,"status":"done","tags":[],"date":"2025-11-14T18:53:04Z","url":{"schema":"http","addr":"65k2.cc/","fqdn":"65k2.cc","domain":"65k2.cc","tld":"cc"},"ip":{"addr":"54.215.31.113","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.wenbobang.com:9099/cs-league/o(2)_1762183043315.html?key=hjUivlQk","fqdn":"www.wenbobang.com","domain":"wenbobang.com","tld":"com"},"title":"loading","dom":{"size":7362,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7340), with no line terminators","md5":"b1383afd0ee84eae6d1fcb776c2efc90","sha1":"211cb12b39435a3e528b0f447ed71deb7bba44c1","sha256":"9ba113b0a50828b7628852ceebe898f38448ce38299817c9711d0b5458d9ae17","sha512":"c32aa5ec934115a580f5fd2d187de68d9bde5318e7a102cf69652c5200c6efbb5db53337eb5a894e03d76eb1e649d039a19f02f802c2e606bba0a9141ae3d29d","ssdeep":"192:OkK89J16qGmS+OUsu9W9rCqCyXHFUlA1ke:lHJ1YmS75CqCU2W1ke","tlshash":"ebe1a49a73c03960169b8ee63f33a8e4e95ae827bf50424bd612fd442c91a78c7c1771","dom_hash":"domhashc8fa184b52651d23f71074d5107e918a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"65k2.cc/","fqdn":"65k2.cc","domain":"65k2.cc","tld":"cc"},"ip":{"addr":"54.215.31.113","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-19T18:53:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"65k2.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"65k2.cc","ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-11-14T18:53:04.497412Z","last_seen":"2025-11-14T18:53:04.497412Z","alert_count":1,"request_count":1,"received_data":7829,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.wenbobang.com","ip":{"addr":"175.6.178.92","port":9099,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"domain_registered":"2020-03-02","domain_rank":0,"first_seen":"2025-11-14T18:53:04.498979Z","last_seen":"2025-11-14T18:53:04.49898Z","alert_count":0,"request_count":2,"received_data":8392,"sent_data":1034,"comment":"","tags":null,"fingerprints":null},{"fqdn":"capi.wpvlva.cn","ip":{"addr":"38.247.12.189","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2025-09-10","domain_rank":0,"first_seen":"2025-11-05T21:07:22.65772Z","last_seen":"2025-11-13T03:37:37.379892Z","alert_count":0,"request_count":1,"received_data":410,"sent_data":580,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.wenbobang.com:9099/cs-league/o(2)_1762183043315.html?key=hjUivlQk","fqdn":"www.wenbobang.com","domain":"wenbobang.com","tld":"com"},"ip":{"addr":"175.6.178.92","port":9099,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ae651d76932e648338195d05c0be4b6","sha1":"ea4d60722f7d418b2564b601679f8a4bff9b8671","sha256":"8139e49bb7e6ced54eae420cbcaae71514d7ce73700c4b89f25222ab10753494","sha512":"b9626e25f60cf6c2d46e8ee34271535a20cc10041a1cfc675b0a0db64c706bcfe3debd033588a03234d9ac4235da2d09d19ccac7206f8351d0e111cb572f9008","ssdeep":"96:KqnTecJU1ny1wq4Nnm3CspjyUOUsu9W9rCqT+2IMpXpW8fe4tUlA1k3:K89J16qGmS+OUsu9W9rCqCyXHFUlA1k3","tlshash":"f8d1949b73c039a0179b8ed73f33a8e4e91aa9677f50424bd612fd442891a38c7c1a71","size":6761,"data":"","first_seen":"2025-11-05T21:07:31.35016Z","last_seen":"2026-03-31T08:23:10.713336Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"65k2.cc/","fqdn":"65k2.cc","domain":"65k2.cc","tld":"cc"},"ip":{"addr":"54.215.31.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-14T18:52:42.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"65k2.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 10:54:02 GMT","end":"Tue, 13 Jan 2026 10:54:01 GMT"},"fingerprint":{"sha1":"5E:9B:B8:EF:38:AB:80:30:EC:BD:0B:BB:59:8B:C0:E4:92:A8:D1:F9","sha256":"08:67:9D:F2:87:95:FB:1F:7A:46:43:37:15:EE:68:35:F8:76:4C:EE:DD:94:26:78:5C:50:8E:E7:62:41:A9:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 65k2.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/plain\r\ncontent-length: 0\r\ndate: Fri, 14 Nov 2025 18:52:43 GMT\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\ncache-control: private, no-cache, no-store, max-age=0\r\nexpires: Mon, 01 Jan 1990 0:00:00 GMT\r\nlocation: https://www.wenbobang.com:9099/cs-league/o(2)_1762183043315.html?key=hjUivlQk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7439,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T05:45:54.968102Z","times_seen":13318572,"resource_available":true,"data":null}},"time_used":2262,"timings":{"blocked":865,"dns":215,"connect":155,"send":0,"wait":531,"receive":1,"ssl":491},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"65k2.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.wenbobang.com:9099/cs-league/o(2)_1762183043315.html?key=hjUivlQk","fqdn":"www.wenbobang.com","domain":"wenbobang.com","tld":"com"},"ip":{"addr":"175.6.178.92","port":9099,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-14T18:52:43.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wenbobang.com","organization":"北京文博帮企业管理有限公司"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 25 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:39:3A:47:00:BA:AB:AE:CC:3B:BA:EE:89:94:43:8C:AE:EE:28:17","sha256":"5F:A3:C7:EC:0A:B0:45:0D:3A:A7:11:57:C5:27:8E:09:92:DC:FF:DC:C4:59:6E:D1:E6:3C:48:DA:88:AA:B8:AF"}}},"request":{"raw":"GET /cs-league/o(2)_1762183043315.html?key=hjUivlQk HTTP/1.1\r\nHost: www.wenbobang.com:9099\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nVary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nLast-Modified: Mon, 03 Nov 2025 15:17:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nDate: Fri, 14 Nov 2025 18:45:04 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7439,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7425), with no line terminators","md5":"9d472de9ef71a0a8df5c38090a51779b","sha1":"4e76c0b5a07678111bfd560e70c18d461951fac7","sha256":"947f1d19fc2c0df39c2104e0a5567af0bf4506437ac13a96b60f0cc737a3003f","sha512":"24daa0dfc6c0d368851dff9f20aad318b216d12b760c9032cce1dd7c48b39586aa15ef3b46311ba5be03a22895b8e16445dafc107e46ed83332d9ca72b71376c","ssdeep":"192:4kh89J16qGmS+OUsu9W9rCqCyXHFUlA1ke:beJ1YmS75CqCU2W1ke","tlshash":"40e1a49a33c03960169b8ee63f33a8e4e85ae967bf50424bd612fd442cd1a78c7c1770","first_seen":"2025-11-05T21:07:31.337138Z","last_seen":"2025-11-14T18:53:13.699404Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2708,"timings":{"blocked":1222,"dns":270,"connect":259,"send":0,"wait":262,"receive":1,"ssl":691},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.wenbobang.com:9099/favicon.ico","fqdn":"www.wenbobang.com","domain":"wenbobang.com","tld":"com"},"ip":{"addr":"175.6.178.92","port":9099,"asn":63835,"as":"No.293,Wanbao Avenue","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.wenbobang.com:9099/cs-league/o(2)_1762183043315.html?key=hjUivlQk","date":"2025-11-14T18:52:45.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.wenbobang.com","organization":"北京文博帮企业管理有限公司"},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Wed, 25 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"54:39:3A:47:00:BA:AB:AE:CC:3B:BA:EE:89:94:43:8C:AE:EE:28:17","sha256":"5F:A3:C7:EC:0A:B0:45:0D:3A:A7:11:57:C5:27:8E:09:92:DC:FF:DC:C4:59:6E:D1:E6:3C:48:DA:88:AA:B8:AF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.wenbobang.com:9099\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.wenbobang.com:9099/cs-league/o(2)_1762183043315.html?key=hjUivlQk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 \r\nContent-Type: text/html;charset=utf-8\r\nContent-Language: en\r\nContent-Length: 431\r\nDate: Fri, 14 Nov 2025 18:45:04 GMT\r\nKeep-Alive: timeout=60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":431,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (427), with no line terminators","md5":"875927332f52c86065894ba05cabb6c4","sha1":"eecffda9610d7210201786c268a07e9cf6b5cceb","sha256":"270d2fb55aa801662897590a27ec1c152407fa36be1d6678c27fd8c1859239e4","sha512":"cf4cf396621a0a581160a4a1181a55e1e76dafbe45b81079c008ecb4d139d33ad1fe66540061f83f13ce6f54837e9886acfbaa8a0a38f0f983701378ba6db990","ssdeep":"","tlshash":"25e05c3dc207100abdb84c3775953b643c1c884325f24774365494b8c1c10b9971134c","first_seen":"2023-04-07T23:28:02Z","last_seen":"2026-04-04T00:46:49.354648Z","times_seen":509,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"capi.wpvlva.cn/api/borch","fqdn":"capi.wpvlva.cn","domain":"wpvlva.cn","tld":"cn"},"ip":{"addr":"38.247.12.189","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.wenbobang.com:9099/cs-league/o(2)_1762183043315.html?key=hjUivlQk","date":"2025-11-14T18:52:45.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpvlva.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 12:31:25 GMT","end":"Sat, 31 Jan 2026 12:31:24 GMT"},"fingerprint":{"sha1":"9E:7E:48:55:E1:46:66:80:5F:51:54:C5:7C:09:DC:3F:E2:88:F4:AA","sha256":"FA:CC:A6:AF:AE:23:09:FF:20:94:A0:E1:3C:22:9E:FB:1F:DB:B3:73:20:01:DE:D8:03:31:95:02:87:18:C3:3C"}}},"request":{"raw":"POST /api/borch HTTP/1.1\r\nHost: capi.wpvlva.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.wenbobang.com:9099/\r\nContent-Type: multipart/form-data; boundary=---------------------------200977086323511315612969074500\r\nContent-Length: 185\r\nOrigin: https://www.wenbobang.com:9099\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 456 \r\nDate: Fri, 14 Nov 2025 18:52:46 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cdn\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\n\r\n","headers":null,"cookies":null,"status_code":"456","status_text":"","fingerprints":null,"data":{"size":47,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"9c60b0110a52115602b05b7114b06b21","sha1":"72ffda53d5db0bb667bd5306b3e1a3a4c6ade7dc","sha256":"5bc8a03740bb4a54855235dfda75a77725612b9c61d41581a4e08b4a8f40ba47","sha512":"fc3c3ed99b233aeeebe7f8eaa34ea71e6c29480aa3a922645d8c6a8d69784a280b8ea3c4a3618e89bec95193f5a337ccc161657b0e8097912e9157957f28350e","ssdeep":"","tlshash":"e49002061e4488556260a8454060aa5c4821c908d056855405e4000002202cc4955d00","first_seen":"2025-07-26T07:30:42.052123Z","last_seen":"2026-03-29T08:10:42.764653Z","times_seen":111,"resource_available":true,"data":null}},"time_used":2025,"timings":{"blocked":933,"dns":629,"connect":149,"send":0,"wait":153,"receive":1,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}