{"report_id":"37210e48-20ac-48b9-bf8b-f3fb01bf03d7","version":0,"status":"done","tags":[],"date":"2026-10-03T18:11:56Z","url":{"schema":"http","addr":"tapw2ohj.sanpinjia.com/","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":0,"asn":153656,"as":"OWGELS INTERNATIONAL CO., LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"title":"TK Store | buy, sell and discover on TK","dom":{"size":19369,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (414)","md5":"b4d1456a4293ae02586805c08b3eedf6","sha1":"d7923818182357f372ebd694c1a978152ab69396","sha256":"b4558c92c75a950e1082677146c103da5264a4727d4db9b97f1e2b0955e1cb52","sha512":"cacf459e473c9bf02559f7e28422278c1429d90427c7e29aed9b61e30effc24f134c1f5e2c2783555f35fa934212e7a5ec11a86babebb1fcf9d973e874336e84","ssdeep":"384:eN1utYFru4oAuZTpKqmPS3f0lyajOIRhVXX:eetYpu4JOFKxa8h11n","tlshash":"6b922f22a4f27073408382e26b312f6a7fe0d567d65a8244b5bc47985fd2d83dd2b52f","dom_hash":"domhash35570fda9201fb5ce2a350bcddbebd78","first_seen":"2025-11-05T15:17:55.702706Z","last_seen":"2026-10-03T18:12:07.370994Z","times_seen":114,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tapw2ohj.sanpinjia.com/","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":0,"asn":153656,"as":"OWGELS INTERNATIONAL CO., LIMITED","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T18:11:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tapw2ohj.sanpinjia.com","ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2020-09-14","domain_rank":0,"first_seen":"2026-10-03T17:06:13.540626Z","last_seen":"2026-10-03T17:06:13.540626Z","alert_count":135,"request_count":27,"received_data":19944236,"sent_data":14055,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":5,"received_data":224537,"sent_data":2898,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sf16-va.tiktokcdn.com","ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2017-09-20","domain_rank":76103,"first_seen":"2020-09-03T03:29:30Z","last_seen":"2026-10-03T05:43:03.632603Z","alert_count":0,"request_count":12,"received_data":5541903,"sent_data":7425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p16-oec-sg.ibyteimg.com","ip":{"addr":"95.101.10.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2019-07-19","domain_rank":45551,"first_seen":"2021-12-22T12:54:34Z","last_seen":"2026-09-29T16:30:45.304679Z","alert_count":0,"request_count":3,"received_data":18042,"sent_data":1911,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":26434,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-lodash.bf84b211.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6be4803af01cf9e16ddf93fb04a1db72","sha1":"0487ddef043cdb2e15e9bf5c599134f35a166ce1","sha256":"853623d58dedcd9a5e536bef349e9ff83dded42d4b1dd2fbab7fe601bb28626e","sha512":"ca190dab6ce3f636419cb5d23cb65d4948126e212756d9f05e6dd2702b09689488b5059277b32ff31d7b1497205804278f77f2f996c4608544322aa3686f71a6","ssdeep":"1536:52fmxNB/M6lzihdLUVnCsmdaKWsq5l1frkn9c/pn4QJn9pyHX:vPadIVlKWHDeCpL9pM","tlshash":"f09393c9bad3f05943a77860402f040bf23e6e54a88e9594d262e4dcbcbc55ee177f1a","size":95095,"data":"","first_seen":"2024-09-28T07:23:58.446746Z","last_seen":"2026-10-03T18:12:07.378653Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-axios.de405cb7.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"44cbfad9b61a51d2124298a49b29c009","sha1":"7443225d2d6bbd323ba0ba811cc2de7f2230d3a3","sha256":"55a2f4274446416598c3b4cee096005842f8529f232507aea4336b04ca1d22a1","sha512":"a0c4762905258d7f6f12285601e915d4fe9214fcfe4dbc95671b50ddb438a69bd28144767351ad9fac6a5e3be171417fe8694d7769952eb37da74d25af57e997","ssdeep":"384:DzdycsDmxm7PX9OWOUtpefXrdZ5BKm4gmZtxR0Ywe7W5EjU7Fh5yk0:DRy7MIVuIpeiBZDt+50","tlshash":"4692fac9b9a0f07547a321f4806f590bf3775529a44d84a0fb50e8e62cb890e873bf6d","size":19792,"data":"","first_seen":"2024-09-28T07:23:58.465686Z","last_seen":"2026-10-03T18:12:07.399694Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-router.706221fa.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"33e7cf1528a483f0c3d9da77a9935747","sha1":"162b9616fa767dd4ec7b64c157e859099782a87f","sha256":"7ee5d4c6a5b6b9013b91f3a7b74dfde9c03b70859bc5e64506984bc75276e990","sha512":"bc7d36a6232b763e6d808690bc07b3a4c9e87caa203a191675e996d560c355575b98b175cfdeea606c9f232c7573680bef1793e6c44c19f33b63d13710ff3103","ssdeep":"768:OK3cu7mmtBYfQoN0C3N3X6gL58s97iG3hfQKfg7g:XcuPC0CNqgL5CKoM","tlshash":"a733f9fab641b0665bfb03e6c0bb0125e3796dda206a4415b298ec4e3074d4da377f39","size":54278,"data":"","first_seen":"2024-09-28T07:23:58.450437Z","last_seen":"2026-10-03T18:12:07.39375Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"70d79cdab134f27f8fdbc7cccdb832a7","sha1":"a49f04609df4803f368b64fcca56ae2b86e974f1","sha256":"c4e63cd7604314a073d3f81efbac738e9d36b38ea38643dea7a7ac308958887f","sha512":"11d90479b50f4793be25f1e02e7f99622f2ae6c269d1a98125c97ea8d9707aacbbd63b05322e427f3ececc6c27e88e9f51a89a153036137aba7cf08f25dc69e4","ssdeep":"","tlshash":"dee0223b27a530728023b1bd9bdfa2803831104b3401c91b3d1e9b840f40a002af38b9","size":410,"data":"","first_seen":"2026-06-09T12:32:09.501921Z","last_seen":"2026-10-03T18:12:07.415505Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-arco.afd3802c.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"66296ae08db9dce0b0ec23e84f1cfa82","sha1":"bbfb60f99fc2b9d2cd418c0ef49790688f83d47b","sha256":"4167eb82e602d4d57bf9d4c41cfd52696be67c0e53cf870b1a48ddbe76847cb5","sha512":"78f0bb30c14c0471032453920e4dce8674bad7f260839843e3892e659e9bf04528767e6eeb6d506535cee8af6595546886318bb95369f8787ad21512749cd373","ssdeep":"3072:IgXb9MtoaJJAtDW6Wu8HI83tcWJpaWJA9H2LvVbEmpNkcsQREkjFNdIw0XhJsBk:e337JpaWJA9H2LvVbn9sQREkuw8ek","tlshash":"13542dd87254b0a593fb41b6803f180ef33b361cb8398d50e2b5e8d474a5649a52bfbd","size":295368,"data":"","first_seen":"2024-09-28T07:23:58.35934Z","last_seen":"2026-10-03T18:12:07.391389Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-polyfill.144bde91.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d409a82f1fd1ccdb4146719442dc76f","sha1":"513830bb776dc7f35be3c4259dabcac2b5c3aab8","sha256":"c5425790d0cba801d53c4e17a27acb6897f5b3908397ef6f803140dfb408b003","sha512":"806134eebc7ff56dfaf3e8d0ba7089aba86c57599e490edcb5b87221b7598aa2a35587a5b12443b2ed14acd0c66d9ba8c6e0ab1c787a984e9e8ab49a02774e78","ssdeep":"3072:la0q8CJLo4Mhy7a2O+MqOTkhMaJt+iFjvGW:m8YwhycmjjvGW","tlshash":"dd34b988b292f0e64bf264d4407f8407f1771a64a44da851ffa1d884687bd4fb07babd","size":247143,"data":"","first_seen":"2024-09-28T07:23:58.455437Z","last_seen":"2026-10-03T18:12:07.411067Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-react.235b4836.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c194b12793a2436efb1f3ce1c674b69","sha1":"2bc65388297613de6cc4622a771e5e001f2d95bc","sha256":"181d18351e54581117e789445bcaa5d7477257c510189767d4d3e04c56bed549","sha512":"da45dc947f923d79a04277c08f915f575fe3a573a8dd4a1c92caf693c74110db65ca697c9af4722412691ed7659732ca9d34fcf2771d378cc2391a7dfe507ca4","ssdeep":"1536:Wv4kq5k79fohxQlV0vMYbAJnfMhnia9Toy7U6SLdl8eIUZQeY:WVX0OnEboy7U6S72eY","tlshash":"79d306e83996f5516ab7126700ef1807733c1a1b280c89a0a615fd8e75f842eb17bfdd","size":140018,"data":"","first_seen":"2024-09-28T07:23:58.462117Z","last_seen":"2026-10-03T18:12:07.373654Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/83.97401b30.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9645b1f5ab1bf07083a13d39627de505","sha1":"74262c4077855e038042a7b30a61515811f247dd","sha256":"b442a68ba589101ee961131f60e5ff500213799774f9b510e892726a7c83ccea","sha512":"c6d68587d9ea87d2a2cb51eb0d7a1ee26c13ad30a6d35df9a05ef5ec1e33efdc088e6c4ca362f9084e099841b35d15492011a137134551fb9fe877d4960fcdc9","ssdeep":"6144:DRHbIYnZo0nf6lg9bPmEOuOcxOkuKoE+oZS:D1UY60Ci9bPpOWTYEtg","tlshash":"86b43acdb299702503e364b9903f110ab33a2a58744dc028f575e9e56cb994ea33bf7c","size":530518,"data":"","first_seen":"2025-01-28T12:57:32.280556Z","last_seen":"2026-10-03T18:12:07.375643Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/main.a0906336.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"34c65ea5f113504cce2d321b961ecdb9","sha1":"08452295b557781bdb2c040bfd8af380f3d0382e","sha256":"bf5826fc56e122bba36429ed692b35c5ca3502f1946adb91901a7eb86becbab4","sha512":"ce29cfa7520bd62e82f7ae4af90ecf259ecc2df46ff3a2378b1e76ad5b8061d9cb271c0cc70e0d193768aa7d914e7e5e9c533bfd83dd00b1e83a3213bd0ab781","ssdeep":"384:5Llw/fc/7T6EsqjFx7TsvirLWtY8x0r8X2iw+fq3coaQXgpJhA:5LO3c/7TsqBe68x0r8X2iwMq3cJi","tlshash":"76520cb6c04138bf2e8e0a84500e3ebaacad5ecf916d7570955c68ddb144af7bc0dac4","size":13686,"data":"","first_seen":"2024-09-28T07:23:58.371454Z","last_seen":"2026-10-03T18:12:07.379343Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-react.235b4836.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.680Z","timestamp":1791051079680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/lib-react.235b4836.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"140018-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140018,"size_decoded":46175,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65460)","md5":"6c194b12793a2436efb1f3ce1c674b69","sha1":"2bc65388297613de6cc4622a771e5e001f2d95bc","sha256":"181d18351e54581117e789445bcaa5d7477257c510189767d4d3e04c56bed549","sha512":"da45dc947f923d79a04277c08f915f575fe3a573a8dd4a1c92caf693c74110db65ca697c9af4722412691ed7659732ca9d34fcf2771d378cc2391a7dfe507ca4","ssdeep":"1536:Wv4kq5k79fohxQlV0vMYbAJnfMhnia9Toy7U6SLdl8eIUZQeY:WVX0OnEboy7U6S72eY","tlshash":"79d306e83996f5516ab7126700ef1807733c1a1b280c89a0a615fd8e75f842eb17bfdd","first_seen":"2024-09-28T07:23:58.462117Z","last_seen":"2026-10-03T18:12:07.373654Z","times_seen":623,"resource_available":true,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/image/4d5d4b724db84f0cb906c728ab7ea3c0.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:20.930Z","timestamp":1791051080930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/image/4d5d4b724db84f0cb906c728ab7ea3c0.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:21 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"478429-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":478429,"size_decoded":476927,"mime_type":"image/png","magic":"PNG image data, 960 x 1196, 8-bit colormap, non-interlaced","md5":"30aa97c1e36015f017016ff4a8c7989f","sha1":"7cbbdba28cefc8133a3c347415ce34da09518603","sha256":"4bd5eae5a0c343511df6ad86d927aee4b897560d5a9cbcd89e57391dfeaab90a","sha512":"e98994d3afe11679f9e0a64a533cb81551cf126a6757613f33d555ebf7f15f28a7a9d9ee8afa983c243654e62a7b863fbef77f1266d328ca3a00226f6fe558d1","ssdeep":"6144:nzK9Xy0nuh3I6UTx2xp5AW2jD1Kj550Nl2pVQDgxUtycl9myAoN0ZN7abt+BzZxb:nWR3uXUYGDM95KlQQDGKyw9mugV0GF","tlshash":"82a4237887346fcd111591ebeaa85d862d5a8f15ba0d9ae300e7fdda530814b31eec33","first_seen":"2025-01-28T12:57:32.35738Z","last_seen":"2026-10-03T18:12:07.374734Z","times_seen":574,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/83.97401b30.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.684Z","timestamp":1791051079684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/83.97401b30.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"530518-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530518,"size_decoded":156423,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"9645b1f5ab1bf07083a13d39627de505","sha1":"74262c4077855e038042a7b30a61515811f247dd","sha256":"b442a68ba589101ee961131f60e5ff500213799774f9b510e892726a7c83ccea","sha512":"c6d68587d9ea87d2a2cb51eb0d7a1ee26c13ad30a6d35df9a05ef5ec1e33efdc088e6c4ca362f9084e099841b35d15492011a137134551fb9fe877d4960fcdc9","ssdeep":"6144:DRHbIYnZo0nf6lg9bPmEOuOcxOkuKoE+oZS:D1UY60Ci9bPpOWTYEtg","tlshash":"86b43acdb299702503e364b9903f110ab33a2a58744dc028f575e9e56cb994ea33bf7c","first_seen":"2025-01-28T12:57:32.280556Z","last_seen":"2026-10-03T18:12:07.375643Z","times_seen":578,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":841,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/right.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.709Z","timestamp":1791051079709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/right.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"159809-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159809,"size_decoded":160327,"mime_type":"image/png","magic":"PNG image data, 480 x 856, 8-bit colormap, non-interlaced","md5":"8d20adbac9e57d69b5176d6f1f2712a0","sha1":"fad8823cc30c7992af981a8ff8a989da3c3a9582","sha256":"da2acc95916ee3c297a16e39bbd72cc593d1da394c57cbe19450034867ca25e8","sha512":"4501e258f3fa38a7d05845572e2b8a426b3e8c2e984dd78eb01b5ab72176cad30ba5f74751e53a450f017fad90605b14a7bc986e4a9c092110409925a916469f","ssdeep":"3072:glI3NvkqTnGnaqlv7PyMkAQBlZEzzCiDAIzXCEL5FtMqc14:B3NsqTnGnJvIlZEzzC0rN5FtDR","tlshash":"75f313665d1d1ed36c55bbc7ce43a562062c7c45f4c8d25a84b3508bba2b2bbf4f48c4","first_seen":"2024-11-19T07:54:21.378091Z","last_seen":"2026-10-03T18:12:07.376775Z","times_seen":539,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:20.991Z","timestamp":1791051080991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tapw2ohj.sanpinjia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:51 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 440250\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-03T21:35:45.73062Z","times_seen":566389,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":21,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/StatisticNumber/2.mp4","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.757Z","timestamp":1791051079757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/StatisticNumber/2.mp4 HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncontent-md5: erv9UDZ3asmee91Z8Ocz0A==\r\netag: \"7abbfd5036776ac99e7bdd59f0e733d0\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: a5376b65422d3bdf6a65422d-a7b6130\r\nx-tos-response-time: Sat, 25 Jul 2026 23:09:33 GMT\r\nx-request-ip: fdbd:dc61:18:414::48\r\nx-response-cinfo: fdbd:dc61:18:414::48\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01ca58e75fedb8755968e46cd3025692b4878e3877b419da684f6024e533d651c7e6118af9fb28ff2e880f522ef3cbbb34c73d2b18e33bd65abcae5f9fce67c024e57b709f4029fa2180ef0f3d844b7e4d45d34a956f7dcad06dda2cad452b5e092dd7f2b835cc90896f826d528046663c\r\nx-tt-trace-id: 00-26072811271458694677B11D4F75E28F-7BA82C79D1FD53AE-00\r\nserver: TLB\r\nx-tt-logid: 2026072811271458694677B11D4F75E28F\r\nx-akamai-request-id: 6b4a5d8.7b8b3cd\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:20 GMT\r\ndate: Sat, 03 Oct 2026 18:11:20 GMT\r\ncontent-range: bytes 0-127233/127234\r\ncontent-length: 127234\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-62.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=23, origin; dur=0, inner; dur=1\r\nx-parent-response-time: 23,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":127234,"size_decoded":128798,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"7abbfd5036776ac99e7bdd59f0e733d0","sha1":"a7d1d7fd53c0c4b915629b030457df1bc95b2089","sha256":"2967fb76be6f7294c8e8f2967b389baa6778ba2cb7f6141dadcf996c92c6edff","sha512":"44ace5efe320457849c3551a7673218747545029462f06137417c9fa4100107f4d72f29413b8a264b24cd8547478fc85e1409a69a6efecfac14aa9c61460d3f7","ssdeep":"3072:SSV3L96dIRQMlSBNNMuuM6OGDK0dAzenBZwafQ:SSV3BlcVuM6rKcAzeYafQ","tlshash":"12c3f172a6c02937ec74733320ea62436745a064a0796bd77c9e8135cfb92eb5f92c94","first_seen":"2025-01-28T12:57:32.249392Z","last_seen":"2026-10-03T18:12:07.378036Z","times_seen":622,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":26,"receive":2,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-lodash.bf84b211.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.669Z","timestamp":1791051079669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/lib-lodash.bf84b211.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"95095-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95095,"size_decoded":31763,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65459)","md5":"6be4803af01cf9e16ddf93fb04a1db72","sha1":"0487ddef043cdb2e15e9bf5c599134f35a166ce1","sha256":"853623d58dedcd9a5e536bef349e9ff83dded42d4b1dd2fbab7fe601bb28626e","sha512":"ca190dab6ce3f636419cb5d23cb65d4948126e212756d9f05e6dd2702b09689488b5059277b32ff31d7b1497205804278f77f2f996c4608544322aa3686f71a6","ssdeep":"1536:52fmxNB/M6lzihdLUVnCsmdaKWsq5l1frkn9c/pn4QJn9pyHX:vPadIVlKWHDeCpL9pM","tlshash":"f09393c9bad3f05943a77860402f040bf23e6e54a88e9594d262e4dcbcbc55ee177f1a","first_seen":"2024-09-28T07:23:58.446746Z","last_seen":"2026-10-03T18:12:07.378653Z","times_seen":625,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/main.a0906336.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.686Z","timestamp":1791051079686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/main.a0906336.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"13686-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13686,"size_decoded":5399,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13686), with no line terminators","md5":"34c65ea5f113504cce2d321b961ecdb9","sha1":"08452295b557781bdb2c040bfd8af380f3d0382e","sha256":"bf5826fc56e122bba36429ed692b35c5ca3502f1946adb91901a7eb86becbab4","sha512":"ce29cfa7520bd62e82f7ae4af90ecf259ecc2df46ff3a2378b1e76ad5b8061d9cb271c0cc70e0d193768aa7d914e7e5e9c533bfd83dd00b1e83a3213bd0ab781","ssdeep":"384:5Llw/fc/7T6EsqjFx7TsvirLWtY8x0r8X2iw+fq3coaQXgpJhA:5LO3c/7TsqBe68x0r8X2iwMq3cJi","tlshash":"76520cb6c04138bf2e8e0a84500e3ebaacad5ecf916d7570955c68ddb144af7bc0dac4","first_seen":"2024-09-28T07:23:58.371454Z","last_seen":"2026-10-03T18:12:07.379343Z","times_seen":619,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/370cd42a67c3424c85fc5395158eec06.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.715Z","timestamp":1791051079715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/370cd42a67c3424c85fc5395158eec06.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"4211-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4211,"size_decoded":4648,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"d4f8979b3d4018df19969be9034516f9","sha1":"cd6ed110c7796e771450e27e820b11f7940d9db6","sha256":"636491d3bb271b7114c8cc3a8b05577949318e025acbd978f644fa1dd449cc76","sha512":"5eb075dab8c90cf6592176262d7e57350575022e4a30301766231aa51bc316b768d7a8dce2098b3012f75e27196978d849ab72eca032641e8a5eda5432b778be","ssdeep":"96:ZEHnswxASzLSucX8QAu1V3H80aqpuT3ktzXPFmEtvaXyHcSxBEchT:ZQn3WSMyu1Vs0bUIXtpIdSxBEQT","tlshash":"bf915dd3d557f081e311e27e0d3410e85519a6edc731a448eee7ec1e7a2ba99426d170","first_seen":"2024-08-19T16:11:10.099878Z","last_seen":"2026-10-03T18:12:07.379978Z","times_seen":667,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p16-oec-sg.ibyteimg.com/tos-alisg-i-aphluv4xwc-sg/12e0b5c375bd4824a5b6cd6dbaf76735~tplv-aphluv4xwc-origin-image.image","fqdn":"p16-oec-sg.ibyteimg.com","domain":"ibyteimg.com","tld":"com"},"ip":{"addr":"95.101.10.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.732Z","timestamp":1791051079732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ibyteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 22 May 2026 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:60:C3:63:69:24:58:C4:01:5E:54:E5:75:FF:CF:3C:04:2A:A9:7C","sha256":"EB:85:E6:6E:4A:2A:32:62:81:76:48:59:57:8F:21:E5:E6:92:6A:5D:EB:F6:F7:49:A5:5C:24:C0:CD:44:5D:2D"}}},"request":{"raw":"GET /tos-alisg-i-aphluv4xwc-sg/12e0b5c375bd4824a5b6cd6dbaf76735~tplv-aphluv4xwc-origin-image.image HTTP/1.1\r\nHost: p16-oec-sg.ibyteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 3433\r\nimagex-fmt: png2png\r\nlast-modified: Wed, 26 Aug 2026 19:31:08 GMT\r\nnw-session-id: 20260827033108E7AAEE1AED06DF44107Bw7wx613df\r\nnw-session-trace: 2026-08-26T19:31:08.231024132Z 123\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-length: 3433\r\nx-powered-by: ImageX\r\nx-response-date: Wed, 26 Aug 2026 19:31:08 GMT\r\nx-tt-logid: 20260827033108E7AAEE1AED06DF44107B\r\nx-request-ip: fdbd:dc53:2:791::34\r\nx-response-cinfo: fdbd:dc53:2:791::34\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 012739541fdc8f4677335bc68ae549de6beb57226a8f94ad2a31d73226adecccf35d714e0a2ec4586c3e1e63102577bd1397084bd6c7c0c50e9918a2d3f5cdcb1882cb7a7e32be9fd23acb8f3fec18b3136ba873cf34a9735a58c5c6755d066561c58d87f5fccd8d57afd9c29a83e7381c\r\nx-tt-trace-id: 00-260827082432A87A38739719858F1A04-73AA796286AAAAF4-00\r\nserver: TLB\r\nx-parent-response-time: 686,23.73.3.221\r\ncache-control: max-age=31491050\r\ndate: Sat, 03 Oct 2026 18:11:20 GMT\r\nx-cache: TCP_HIT from a95-101-10-76.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0, inner; dur=1\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nx-akamai-request-id: 8a477c8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3433,"size_decoded":4810,"mime_type":"image/png","magic":"PNG image data, 440 x 440, 8-bit colormap, non-interlaced","md5":"698f72a21509608268eff77c2a950582","sha1":"bc5cd1ef9da74522d6db5cdd7ae0df1dba166ba8","sha256":"5110f20c2f5ec6003f7d1073e529e5a2d3fee741f29368e396a945cd5486614e","sha512":"7f07e92f9d02f1a89857c1da0b6a3c7c6ad71645150152b84090e66cabc15574a65bf744d0fde5b99a828736bf75930a24557590211866a2196a429c55c0956c","ssdeep":"","tlshash":"1b6119a348d1de6cc90da334c8daa84f951e4f0cdb66a60ce951d70025a0b5816f615e","first_seen":"2025-01-28T12:57:32.254402Z","last_seen":"2026-10-03T18:12:07.380501Z","times_seen":625,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":24,"dns":0,"connect":3,"send":0,"wait":4,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/6faccd0453f640bb869575f3d7ed4aec.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.718Z","timestamp":1791051079718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/6faccd0453f640bb869575f3d7ed4aec.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"3348-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3348,"size_decoded":3797,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"e5618045243b8fbb796589911deeb9dc","sha1":"751680b6488cb9b804721fee0e2492d1af3b05ab","sha256":"a8fef6e8fcbddd163928d82c0e34691964176f185da2dbf303f55d4d04d7a553","sha512":"a045f53472f124741386d773530810e4a6b0f408e87162ecb3b4a0ddb9114d8d234329e914a072968d7f5b74bbb9b0249cdb74fc035612b2015ea464f1a2eba8","ssdeep":"","tlshash":"11615ce30c23c152e9940db61d303988b5fd1ca95015352629152da66e7fe447eeea0f","first_seen":"2024-11-19T07:54:21.363854Z","last_seen":"2026-10-03T18:12:07.381125Z","times_seen":658,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/mp4/middle1.mp4","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.739Z","timestamp":1791051079739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/mp4/middle1.mp4 HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 874835\r\netag: W/\"874835-1749268242000\"\r\nlast-modified: Sat, 07 Jun 2025 03:50:42 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-874834/874835\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874835,"size_decoded":875300,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"63f2aebfc6f4517ad435265dd79b4b96","sha1":"3b73daf67ed25d09906751b89ee1ccd7e82c2fac","sha256":"097ad3de9287bd12b9784bf853e8a5dd3044131a0787963e25a5708680764bf6","sha512":"e35d2ab4068a2c16a2350dd8aad9e36c205e971b67438bdb232f4018669311bb8369ea23b8f0c56f720d6df672ccf3a72481de068a80597386222a81a79c227b","ssdeep":"12288:dFpmeRihpggIu+zcw1BlBVEB+uwxLDs2GReQAyVxyx4ICKzJtfg63jvCAEGlcY5g:pxR2pggmzcIGB+LLDK09Oxyx4K7ZzaGi","tlshash":"1e15335113cd2fdef71f11ba5a1af6a3e562832c9e7ac398cb17548bec14a709c048e4","first_seen":"2025-01-28T12:57:32.326427Z","last_seen":"2026-10-03T18:12:07.381769Z","times_seen":502,"resource_available":false,"data":null}},"time_used":2035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":1249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/8ea836f9a8c44e2693e28007382e504a.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.714Z","timestamp":1791051079714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/8ea836f9a8c44e2693e28007382e504a.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"4687-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4687,"size_decoded":5141,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"3cfe19ee2948dc3d801afc4b6c25339f","sha1":"1e908d24b3bb21908191a504c74ee0be3e3a4d2c","sha256":"e71399ca790a567d6f46af5c957a8a4fbd3631a19f9d7c527cc82e57a4048cfe","sha512":"5632e7dff15dfc0b4f46526316d8ae3c432186f1d93c09ca3705c119eee3403fff465bd928c4858de2c8df0ab25588ba8072ca07f91b54b7d5c373292676d2b3","ssdeep":"96:BGTOMOPApcEyL+sCKjU1gjfe/2dYwZveG9evGEHK1:wT2YpcVdbc2dYwZveKetq1","tlshash":"aba18ef8b661c7fdb42d39b13a922c4bf51914c709e88f0eda4e4d5c908bd08d537682","first_seen":"2024-08-19T16:11:10.100895Z","last_seen":"2026-10-03T18:12:07.382479Z","times_seen":671,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/7ee7c29f6d524e03ac48cc32eed4b912.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.727Z","timestamp":1791051079727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/7ee7c29f6d524e03ac48cc32eed4b912.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 371\r\netag: W/\"371-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371,"size_decoded":814,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 4-bit colormap, non-interlaced","md5":"1ab6d013a3f43915b8ea2fbd0b74dbe7","sha1":"df52c03c337bbd74a2b976575a693eed41b0e117","sha256":"851cf8b809ff8f67253ac16dc1eb9c74d07055716963188f26a66a6af385d370","sha512":"105ff7044b320e6d00bf9a3fc83342a7bd22ec025939807de8671d1acad7a94f850a8d4f3bb8a484a62b982b978628fbb090570c33e0e61033aa9b215d9ff456","ssdeep":"","tlshash":"b5e0c0e3afa35dacda676abb412cdd9881931828511a1d07c44b22727b3214d73a5f47","first_seen":"2025-01-28T12:57:32.304252Z","last_seen":"2026-10-03T18:12:07.382991Z","times_seen":600,"resource_available":false,"data":null}},"time_used":1416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/mp4/TKMALL_ZIP.mp4","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:21.096Z","timestamp":1791051081096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/mp4/TKMALL_ZIP.mp4 HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=16678912-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:21 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 69943\r\netag: W/\"16748855-1749268218000\"\r\nlast-modified: Sat, 07 Jun 2025 03:50:18 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 16678912-16748854/16748855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69943,"size_decoded":70420,"mime_type":"video/mp4","magic":"data","md5":"4c21ad4bc599e3158818429abaf502de","sha1":"7f3e01f591b10cfb2b777cf4fccb80b7fc5b37dd","sha256":"6dcfb4038fc88528d285a286c9433ede75e30f51cad3788bb09ba560eec330f7","sha512":"5b695d6d3afffaf6ab8dc7f9c6f14f9fbea9759f96123ee8ed9a29e2c64c12787baa961f737ff02862aa67a2d2c26da8af57689bb7acce6ae18f910f32117705","ssdeep":"1536:3KuntZPiYJAqdCTDIq7VMSVGBwYuA17sNYJ9bc3:3NtEeaUyV+BTWNYJK3","tlshash":"6e63566c73af664be9262b34b9d243483b31d89ecb8b078f025643d7ad453d528cd6d8","first_seen":"2025-01-28T12:57:32.328008Z","last_seen":"2026-10-03T18:12:07.383606Z","times_seen":546,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/matashop2.svg","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:21.906Z","timestamp":1791051081906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /matashop2.svg HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:22 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 729\r\netag: W/\"729-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":729,"size_decoded":1176,"mime_type":"image/svg+xml","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (621), with no line terminators","md5":"76c0096f13687d36a142bebb97727524","sha1":"bd2fe6f237b7590b3be85fb6089ba1f60ce1e715","sha256":"a83030462625ba852414a5793068341f044aa5778781043d31eeb80e3f1fc342","sha512":"207e38a48b7d6b651588d6d4cfef90b38faf369bf2b7a8431793ac059cb9357269687851298846b90d634160d595860b2fa412c597d15895bbf6f4f8cdfea771","ssdeep":"","tlshash":"a6011079d00a4646be7948fb62912fe43109d883c6f20f25b8549de8f8ca8613b31a4d","first_seen":"2025-06-28T11:01:09.97987Z","last_seen":"2026-10-03T18:12:07.384134Z","times_seen":145,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/f9de5c284df74f4e82273530670802fd.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.717Z","timestamp":1791051079717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/f9de5c284df74f4e82273530670802fd.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"3695-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3695,"size_decoded":4152,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"33e2a0f08c8953e1b848c1cce59a97cd","sha1":"d74aee59026b7f8fa4da441ca2ddcf9cb478f4d2","sha256":"e2cb4cd6376a8df609b1ef54e0305548bac38b0b432c2bf6da1177024bffa906","sha512":"ba09dadcb25209aabcbc67b07e3a742b287e335d475eefd63a4972a132941ab108109b31a2edebb9b2a64fa0141ace99ad5f204b3befcc4d7bbce48df9d794e3","ssdeep":"","tlshash":"c7716cc4b26bb2cfe8009b3bd1db8420444776b519251d88f4a4873b58fcfd99a65297","first_seen":"2024-11-19T07:54:21.356719Z","last_seen":"2026-10-03T18:12:07.384876Z","times_seen":592,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p16-oec-sg.ibyteimg.com/tos-alisg-i-aphluv4xwc-sg/e89eefbaf7c0405197425abe8202fdd1~tplv-aphluv4xwc-origin-image.image","fqdn":"p16-oec-sg.ibyteimg.com","domain":"ibyteimg.com","tld":"com"},"ip":{"addr":"95.101.10.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.733Z","timestamp":1791051079733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ibyteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 22 May 2026 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:60:C3:63:69:24:58:C4:01:5E:54:E5:75:FF:CF:3C:04:2A:A9:7C","sha256":"EB:85:E6:6E:4A:2A:32:62:81:76:48:59:57:8F:21:E5:E6:92:6A:5D:EB:F6:F7:49:A5:5C:24:C0:CD:44:5D:2D"}}},"request":{"raw":"GET /tos-alisg-i-aphluv4xwc-sg/e89eefbaf7c0405197425abe8202fdd1~tplv-aphluv4xwc-origin-image.image HTTP/1.1\r\nHost: p16-oec-sg.ibyteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 6245\r\nimagex-fmt: png2png\r\nlast-modified: Sat, 08 Aug 2026 15:24:31 GMT\r\nnw-session-id: 202608082324314665B2CC273E9EFD6AD29b8ms13df\r\nnw-session-trace: 2026-08-08T15:24:31.259817738Z 40\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-length: 6245\r\nx-powered-by: ImageX\r\nx-response-date: Sat, 08 Aug 2026 15:24:31 GMT\r\nx-tt-logid: 202608082324314665B2CC273E9EFD6AD2\r\nx-request-ip: fdbd:dc53:2:745::26\r\nx-response-cinfo: fdbd:dc53:2:745::26\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 011c32407044407f51e0b7fd6c655250b7a6e53bbfd6e2bd452944a3c7de1a4610984894f078585b90b7eea0a6b36eece47c51c333426e46b1b91d0a58b0c7addd170453ac7a91a2bb6602ac977f276e82ad69823d3769b07910e4124bec934009bb500209a23f78c76171f612e0d4227b\r\nx-tt-trace-id: 00-260809041249CC86F94A435BF95B5217-6AD975BC964BFDC5-00\r\nserver: TLB\r\nx-origin-response-time: 75,96.7.219.155\r\ncache-control: max-age=30982558\r\ndate: Sat, 03 Oct 2026 18:11:20 GMT\r\nx-cache: TCP_HIT from a95-101-10-76.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0, inner; dur=1\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nx-akamai-request-id: 8a477c9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6245,"size_decoded":7621,"mime_type":"image/png","magic":"PNG image data, 440 x 440, 8-bit colormap, non-interlaced","md5":"166e5dbcf4fd1b0973a11e2dd55658d8","sha1":"322e4c155a803cbb3e3d5edfef36d9624f120ef8","sha256":"d80e8ca6a1419dc51e12e27cf58bbdec04aa6a687c773f50d1c4d0f9c8d6c71f","sha512":"bfd15afad02dd3fc5fbce14d90f486fec074518423d829cc1b07ceaa134e617262ef46bf3e1bc85c064d6b85be0a521228e6fea9ef431a52e5adc3195a9c99ff","ssdeep":"192:m1L8ISdQ/0UxBShe/e7VOIoJdW0+PCwKvmjMPCZ:m1HDV/eBO7JIPCwKqx","tlshash":"f4d19eefc7730af8d352997fc75e72a8551f692416ca231a60c6dd543e0ae1d8204e29","first_seen":"2025-01-28T12:57:32.267502Z","last_seen":"2026-10-03T18:12:07.385703Z","times_seen":625,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":24,"dns":0,"connect":3,"send":0,"wait":3,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/mp4/TKMALL_ZIP.mp4","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:21.590Z","timestamp":1791051081590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/mp4/TKMALL_ZIP.mp4 HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=131072-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:21 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 16617783\r\netag: W/\"16748855-1749268218000\"\r\nlast-modified: Sat, 07 Jun 2025 03:50:18 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 131072-16748854/16748855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16617783,"size_decoded":16618261,"mime_type":"video/mp4","magic":"data","md5":"fc553469abadc3185dbf97bf1574bff6","sha1":"8e50f82e9a6cf3c792dd4aab15fb2a9293c94579","sha256":"d439ff0632d564b8a918036313cc2d721d7a318e135d719a18484ec046c7b59c","sha512":"efc419815d79ad94aa0800b85f494bac207c07bc35a6e43062a7de165bbb2c6324cd9fafa1463daba979e9eb8d762c5949c0b176aa4ad68431c1c1a1faf137e8","ssdeep":"24576:TcwRrhbVnhU5QT+Iev8VbZIzRAdnmhgiAnHhYKsH4nL69hBQz:oybVhkbIev4qupmaBYKsYnL6jGz","tlshash":"8a25336980e34b9fee772dbaed19d05cbb6c91e0e3f2ffe3d0430096285535569610a8","first_seen":"2026-06-09T12:41:41.549323Z","last_seen":"2026-10-03T18:12:07.386513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":2071,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700\u0026family=Open+Sans:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.688Z","timestamp":1791051079688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;600;700\u0026family=Open+Sans:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Oct 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25750,"size_decoded":2642,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"494f90abcc5754cfe64492439457c172","sha1":"ad998f2bf7ce722c3745460898001b550297af43","sha256":"a77a904ca74c2f7d2743e47ceac24c63c73c66a6b73479ba93dbfd40183a005a","sha512":"d4484c962142c916fed968550f23f3bc49bffda551ca471923f84d556aafaa17e398a9426f50f5c5f9090151b7adc1e987717d4c24ac2bdbfc103fce04c4da7c","ssdeep":"192:YRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+OjunCKKf2XdrqJnbqGIwV4jozYUChhE:4QPTzajdst5qY4tMgqY45f/qY4g","tlshash":"17c20c900017a800ab471cd623ce7f35ee0fa2667044c07a6ffd5aaaeedad25537572d","first_seen":"2025-10-14T13:39:40.913275Z","last_seen":"2026-10-03T18:12:07.387815Z","times_seen":160,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":38,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/Banner/placeholder.png","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.706Z","timestamp":1791051079706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/Banner/placeholder.png HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 542833\r\naccept-ranges: bytes\r\ncontent-md5: VHW+LO0S7pyvGVDRJKpEUQ==\r\netag: \"5475be2ced12ee9caf1950d124aa4451\"\r\nlast-modified: Tue, 27 May 2025 06:41:37 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: 8f09ac79994d527d6a79994d-ade5a88\r\nx-tos-response-time: Mon, 10 Aug 2026 09:26:37 GMT\r\nx-request-ip: fdbd:dc61:18:421::49\r\nx-response-cinfo: fdbd:dc61:18:421::49\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01c935c2f2a6611bea5f758a76b2ad129a0a272088391f1e2b89cc1cb40c82a15429e8995bf2c921d25488725cb70ae54ae886f459c4ef50cca16dc8627cd08edcaf032bf5dd4ac5b36cadf73e90aa30b67f83e343c9ce65a368f6e5f20263e637dec5c77eb3d8d8cffd2d908c05f0642c268978bb7b8c71e19156ee978ce44dc3\r\nx-tt-trace-id: 00-26081407104374AB5454308D908B5739-6A2C504FF8CDE301-00\r\nserver: TLB\r\nx-tt-logid: 2026081407104374AB5454308D908B5739\r\nx-akamai-request-id: 149a1187.7b8b3b4\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-94.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=18, origin; dur=0, inner; dur=1\r\nx-parent-response-time: 17,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":542833,"size_decoded":544392,"mime_type":"image/png","magic":"PNG image data, 1125 x 2004, 8-bit colormap, non-interlaced","md5":"5475be2ced12ee9caf1950d124aa4451","sha1":"ff32f262c7234de0cc215b39524b3def7dcec9bb","sha256":"5e751a93469021b2873cadfc59404378bae57a81fddc4ecb1234939292fd12ed","sha512":"3989a2a6d0e67674ea802d4fd5600831cfa7714bbdb0117a3dbc343101104daaa4a3c97972951827f27a21b8add741af11e6f35d08314072b497c993a9653878","ssdeep":"12288:Y456Edfo2e3kKm/LV5pueHXD/9GKNhHVGaS+yl6M:Y4kYfTe3kKcV5cAXDZOhrx","tlshash":"c1b423621980ceb0a863f57cf69ec8e2f8ac790f241fdb0971b27606bcc45d67697641","first_seen":"2025-01-28T12:57:32.244558Z","last_seen":"2026-10-03T18:12:07.388935Z","times_seen":543,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":26,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/c66126ce696f4672af7d698e0f3d61cb.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.712Z","timestamp":1791051079712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/c66126ce696f4672af7d698e0f3d61cb.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"4430-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4430,"size_decoded":4862,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"6acc5ea63480977112e33d4e21c4cbef","sha1":"692bbadde81ff9b82b0343fa4c05dc82ad076cdd","sha256":"ea7e56e5af17e18a1e12e514e32a3ef40928d522aeb031f1388c2d9d7796f515","sha512":"2fc39f0266ca57bec9808ca8e074c3fe6e823422ad950d896e4b66df066ca5dc80ed991796bee82acd0388a206fc470404c4068a82776f6406872bb3e1878ea2","ssdeep":"96:17vXZylQIxi/7YSvkYjYBQi1E3z5Opfgqgz3q85dze:1LXolQIxizsYp9+fgqR8DC","tlshash":"2c919ebc27ed8f93c30cc2fa4a17a722c4a06437e20ba190c6fd9340ebb6166416538c","first_seen":"2024-08-19T16:11:10.099083Z","last_seen":"2026-10-03T18:12:07.3903Z","times_seen":667,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-arco.afd3802c.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.667Z","timestamp":1791051079667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/lib-arco.afd3802c.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"295368-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":295368,"size_decoded":76085,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"66296ae08db9dce0b0ec23e84f1cfa82","sha1":"bbfb60f99fc2b9d2cd418c0ef49790688f83d47b","sha256":"4167eb82e602d4d57bf9d4c41cfd52696be67c0e53cf870b1a48ddbe76847cb5","sha512":"78f0bb30c14c0471032453920e4dce8674bad7f260839843e3892e659e9bf04528767e6eeb6d506535cee8af6595546886318bb95369f8787ad21512749cd373","ssdeep":"3072:IgXb9MtoaJJAtDW6Wu8HI83tcWJpaWJA9H2LvVbEmpNkcsQREkjFNdIw0XhJsBk:e337JpaWJA9H2LvVbn9sQREkuw8ek","tlshash":"13542dd87254b0a593fb41b6803f180ef33b361cb8398d50e2b5e8d474a5649a52bfbd","first_seen":"2024-09-28T07:23:58.35934Z","last_seen":"2026-10-03T18:12:07.391389Z","times_seen":624,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/bebdcec3159f43b7ab2f4d3f309ec517.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.728Z","timestamp":1791051079728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/bebdcec3159f43b7ab2f4d3f309ec517.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 946\r\netag: W/\"946-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":946,"size_decoded":1389,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 4-bit colormap, non-interlaced","md5":"9b5a17c67cbc1549d6bdf73e2bdaa365","sha1":"ffa95311b78f38654ad36c9e8a3f9a4509b8a9f8","sha256":"f59595016494e5ae8575a4cb710acb88f000355de381a1d7b0df5a3449c041bb","sha512":"42b55b8293c33a9c4126f470ada83ec6fc4a61e8d8bba8e633559e82513f6b893c0da7cfb492745ca204b74325a97cfa8016fa49a116c4a4b7b643ed1a652573","ssdeep":"","tlshash":"c31194b77c002e645f5e6abac049907cd41871a97ec652168227d42276b4b809542b2a","first_seen":"2025-01-28T12:57:32.302913Z","last_seen":"2026-10-03T18:12:07.392296Z","times_seen":600,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-router.706221fa.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.682Z","timestamp":1791051079682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/lib-router.706221fa.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"54278-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54278,"size_decoded":18284,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54201)","md5":"33e7cf1528a483f0c3d9da77a9935747","sha1":"162b9616fa767dd4ec7b64c157e859099782a87f","sha256":"7ee5d4c6a5b6b9013b91f3a7b74dfde9c03b70859bc5e64506984bc75276e990","sha512":"bc7d36a6232b763e6d808690bc07b3a4c9e87caa203a191675e996d560c355575b98b175cfdeea606c9f232c7573680bef1793e6c44c19f33b63d13710ff3103","ssdeep":"768:OK3cu7mmtBYfQoN0C3N3X6gL58s97iG3hfQKfg7g:XcuPC0CNqgL5CKoM","tlshash":"a733f9fab641b0665bfb03e6c0bb0125e3796dda206a4415b298ec4e3074d4da377f39","first_seen":"2024-09-28T07:23:58.450437Z","last_seen":"2026-10-03T18:12:07.39375Z","times_seen":622,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/liveHolder.png","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.719Z","timestamp":1791051079719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/liveHolder.png HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 219736\r\naccept-ranges: bytes\r\ncontent-md5: aFOxPncKLdEWqCLCJ6fDuw==\r\netag: \"6853b13e770a2dd116a822c227a7c3bb\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: 61207e7be45ea89f6a7be45e-ade5a9b\r\nx-tos-response-time: Wed, 12 Aug 2026 03:11:26 GMT\r\nx-request-ip: fdbd:dc61:c:53::47\r\nx-response-cinfo: fdbd:dc61:c:53::47\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01db5d0d4be480ab1ffe542910e4d5f69d097b7086e4ef37033708d45dff7c39f737c3a2b379f23189d348d4bed9fd7f5538544431fbcc36f0bd404a7b860e72d5ffccabe5ee06cb08e8c285250abcbecd15011ac5289d7a80bba5f9d653db85350c441770d768e1b022a95ca0b8fcc84a8dd8f87f62ace051966f14af03589190\r\nx-tt-trace-id: 00-260814145508F8F095658EA689D075AA-46B14B40F305EFCA-00\r\nserver: TLB\r\nx-tt-logid: 20260814145508F8F095658EA689D075AA\r\nx-akamai-request-id: 6b4a199.7b8b3b0\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_HIT from a2-22-55-62.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=6, origin; dur=0, inner; dur=2\r\nx-parent-response-time: 4,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219736,"size_decoded":221280,"mime_type":"image/png","magic":"PNG image data, 565 x 999, 8-bit colormap, non-interlaced","md5":"6853b13e770a2dd116a822c227a7c3bb","sha1":"a9d56bb607687e8649f3b35cea83420f191bf809","sha256":"97a8f62035393e92e48c8a2fb0c5e2891cdef960c530f07521c7f9ba2692d328","sha512":"09fe5a048dc9b3bc7c51af2cd30b62a3227871cc93d5e80352b6a6241ca3c89ecc975c0875aa7c5e5db299092d828b54c0acd22799c1cdb0676520e122870b56","ssdeep":"3072:2Z6Q9AkPO76gJiKAmgPaTsWfoAOQNkDel6BP4i1sqKMwcwYJAoBgBnWN3vVCAxEi:fQPGbPgPaTtxN8OesqaYeBWNN/Ocf","tlshash":"e924226688cb9ef9e57356f3944eb63de53f0f2710a5d170a6820091ced3b19ba6074c","first_seen":"2025-01-28T12:57:32.246085Z","last_seen":"2026-10-03T18:12:07.396261Z","times_seen":615,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/4202b536750c4d449cce93685d24f50d.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.729Z","timestamp":1791051079729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/4202b536750c4d449cce93685d24f50d.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 591\r\netag: W/\"591-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591,"size_decoded":1034,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 4-bit colormap, non-interlaced","md5":"f29ec15e3d82a755e8bde79c5e6d1b43","sha1":"634f499e156acf22a7615fe4267bc6a5fb9d128c","sha256":"3db1a67ad8b7d0fd12aa7c089be930cb96d2fd23cb37a253f0364dd4bbd0b811","sha512":"d798d4e9a1376c91f6897bea78fbe0fe872c1c3b84589b7e99d390d21124112bb4c7994814d812b7de7e3d4e9786987dfccbdce16739abce9d7c043b66acb7e8","ssdeep":"","tlshash":"24f0b1c782203c3a0b82d5638d92460397323e381baa603284d1a6713a033e88e180bf","first_seen":"2025-01-28T12:57:32.331714Z","last_seen":"2026-10-03T18:12:07.397405Z","times_seen":599,"resource_available":false,"data":null}},"time_used":1412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/Shoppable_video.mp4","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.748Z","timestamp":1791051079748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/Shoppable_video.mp4 HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncontent-md5: /HGrKb5Yc5aqaisvFTjb4g==\r\netag: \"fc71ab29be587396aa6a2b2f1538dbe2\"\r\nlast-modified: Tue, 27 May 2025 06:41:37 GMT\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-tos-request-id: 991d8965657e19156a65657e-a7909ea\r\nx-tos-response-time: Sun, 26 Jul 2026 01:40:15 GMT\r\nx-request-ip: fdbd:dc61:10:331::174\r\nx-response-cinfo: fdbd:dc61:10:331::174\r\nx-response-cache: miss\r\nx-tt-trace-host: 015a3688fcece007226e69c4ec669947a3592c18ab596a0a3c0208baaf286c0798f0af5912b1b384413a7896782ad73dd05c651efde918914d6d65ad68148052b513355f08f8d1ddd15e91da042c2442f88b34e6701cccec099bacfe25754c62b6e594e17f88b4c065b9d488f230ae1ad3\r\nx-tt-trace-id: 00-260726094014D383DA5D252056A36F67-036FEE81AFEB00F7-00\r\nserver: TLB\r\nx-tt-logid: 20260726094014D383DA5D252056A36F67\r\nx-akamai-request-id: 6b29e19.7b8b3ce\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:20 GMT\r\ndate: Sat, 03 Oct 2026 18:11:20 GMT\r\ncontent-range: bytes 0-821478/821479\r\ncontent-length: 821479\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-62.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=23, origin; dur=0, inner; dur=90\r\nx-parent-response-time: 3,184.27.176.33, 22,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":821479,"size_decoded":823060,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"fc71ab29be587396aa6a2b2f1538dbe2","sha1":"d30907106a682672b511fff75e36844ca2bc8a0d","sha256":"d94a55d407f073a7b80e7e6d8218964d116bd45588d056da5576ec0090c6c96d","sha512":"0a5599a7d0caee04a24abf74a460bd0ee2b3d22b7d4282046176db83a2143a024aebbe34305c2e7930100228090e4a126152eff6d096c5e18534b968a1e65741","ssdeep":"12288:saLsdllXzVGJIgxwBoF2Cy5B3Y3BfU8q6+kIBhFJ1dgkgX2XtxSgPK5QNvlRmUB5:xsdvVGJ3wyFALhy+vxJ1n8aNK5imi","tlshash":"4c0523a693c10a6fc2636533e91307297e94eded6ace87d3422792cb5daf0893d153c4","first_seen":"2025-01-28T12:57:32.270595Z","last_seen":"2026-10-03T18:12:07.398287Z","times_seen":606,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":21,"dns":0,"connect":3,"send":0,"wait":27,"receive":29,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-axios.de405cb7.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.673Z","timestamp":1791051079673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/lib-axios.de405cb7.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"19792-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19792,"size_decoded":7628,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19792), with no line terminators","md5":"44cbfad9b61a51d2124298a49b29c009","sha1":"7443225d2d6bbd323ba0ba811cc2de7f2230d3a3","sha256":"55a2f4274446416598c3b4cee096005842f8529f232507aea4336b04ca1d22a1","sha512":"a0c4762905258d7f6f12285601e915d4fe9214fcfe4dbc95671b50ddb438a69bd28144767351ad9fac6a5e3be171417fe8694d7769952eb37da74d25af57e997","ssdeep":"384:DzdycsDmxm7PX9OWOUtpefXrdZ5BKm4gmZtxR0Ywe7W5EjU7Fh5yk0:DRy7MIVuIpeiBZDt+50","tlshash":"4692fac9b9a0f07547a321f4806f590bf3775529a44d84a0fb50e8e62cb890e873bf6d","first_seen":"2024-09-28T07:23:58.465686Z","last_seen":"2026-10-03T18:12:07.399694Z","times_seen":624,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/tkmall-style.css","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.690Z","timestamp":1791051079690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /tkmall-style.css HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"15868-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15868,"size_decoded":4170,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (878), with CRLF line terminators","md5":"fbc87b8291af886d681ce5493a882502","sha1":"99b6521a6f5d07880dcfd60ef50c6c596021cd73","sha256":"763fe6cabd13638583d86760ca1dbcbbfc52668b338a9995ffa885eeb760ce45","sha512":"d456912e69f914272d3dbd20abec4bb0f6f26b4347bf411be38e61c77c512754482148b6f792a4768e023d20bd3a6a00ee7920ab2f20fdd4b093db2eea6f42d2","ssdeep":"192:o8GXZYACCiNbE0t5OqzAjo092LwRlXRJ699wQSC/+MLcmcD5:1SWxsscXRJ0Sdmc9","tlshash":"da62855c961191163137fbbcebe61b18b6608062df06036e7ff46049a3c56b88226fdd","first_seen":"2025-08-09T01:18:23.931321Z","last_seen":"2026-10-03T18:12:07.400765Z","times_seen":145,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/shopHolder.png","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.721Z","timestamp":1791051079721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/shopHolder.png HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 197265\r\naccept-ranges: bytes\r\ncontent-md5: wlhsASDBfawYQKzg1MOXpQ==\r\netag: \"c2586c0120c17dac1840ace0d4c397a5\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: 1d4b6f7b6431365e6a7b6431-a7b35f3\r\nx-tos-response-time: Tue, 11 Aug 2026 18:04:33 GMT\r\nx-request-ip: fdbd:dc61:a:320::223\r\nx-response-cinfo: fdbd:dc61:a:320::223\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 010da7f9cf8c2c5b233ba8210d1dc5ec71bfb047f2145063508438db148f7e69347b4efe0fd8b5f876ff3f95a70de4c12a75dd47d453ef7f35ae6364530a26f093d0c7adeafaa98bb67cf4bf071d247d35549b000953330f623aeea095285151a4\r\nx-tt-trace-id: 00-260812161701C9722CD8A10621837EC4-29E96B60768BAA35-00\r\nserver: TLB\r\nx-tt-logid: 20260812161701C9722CD8A10621837EC4\r\nx-akamai-request-id: b7c588d.7b8b3b2\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-102.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=17, origin; dur=0, inner; dur=2\r\nx-parent-response-time: 4,184.27.176.9, 16,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":197265,"size_decoded":198776,"mime_type":"image/png","magic":"PNG image data, 564 x 999, 8-bit colormap, non-interlaced","md5":"c2586c0120c17dac1840ace0d4c397a5","sha1":"bd0383f9f1176b9d005b22d0cb793d5b76b096d8","sha256":"4cf9c584174b0ee786aad0e4dd112f3c1c9cbea6415255fa65646bf343d12ed6","sha512":"f8e64f99775f9091f6ca35adb5c8eff42e0bb53b8afdf05dc31ceae5c68492cea6a74d1fc4b367c4e0d903ea6c3db8d29df29fa2fbeed8280d416550a21a8ca3","ssdeep":"3072:/0i7Ob1hznckX4bgdA9qKF/I511lPbc/nDGiBGyTcXCEBm+pd9B5dEynoW5y:X7ORP/dA1Fg51LPbc/nJUrBl9B5W","tlshash":"e1141211f632e558db2226cbedc6d84430676a0343577ea0d790d8fe259847e14caf6e","first_seen":"2025-01-28T12:57:32.242925Z","last_seen":"2026-10-03T18:12:07.401656Z","times_seen":615,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/StoreHolder.png","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.722Z","timestamp":1791051079722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/StoreHolder.png HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 102773\r\naccept-ranges: bytes\r\ncontent-md5: I4MjopdhVv/6tvrEVI3PeQ==\r\netag: \"238323a2976156fffab6fac4548dcf79\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: 1cefbe77cedc7e5e6a77cedc-fdbdgdc61g18g173gg32\r\nx-tos-response-time: Sun, 09 Aug 2026 00:50:36 GMT\r\nx-request-ip: fdbd:dc61:14:425::38\r\nx-response-cinfo: fdbd:dc61:14:425::38\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01118072b1be758be5167e1137cf09da4cd87b7c6d477411c808561f3aa9ba698f74497d06ac9b3116015fdd6f69433322c42f8d8705130b24b4976be87d737a5767d3e7a0a9cc110a5d0c28160eaac5b0b45e4b196d5910769c95500c8e510555fed550e2cdb945c6101057584a5e27ac\r\nx-tt-trace-id: 00-260810070336D37E18FB7A866C0113D1-13B0DD17836CC403-00\r\nserver: TLB\r\nx-tt-logid: 20260810070336D37E18FB7A866C0113D1\r\nx-akamai-request-id: b7c588e.7b8b3b3\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-102.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=17, origin; dur=0, inner; dur=2\r\nx-parent-response-time: 16,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102773,"size_decoded":104313,"mime_type":"image/png","magic":"PNG image data, 565 x 999, 8-bit colormap, non-interlaced","md5":"238323a2976156fffab6fac4548dcf79","sha1":"665f5fd40ba423b018fb111f043f400854547e57","sha256":"d10436c67c7206ef5e2db1dfddeb770e74cd2a722e6be5eced08d5ad0a18627b","sha512":"133a1892e6290f6c5b8674267abdfab8a85dd450c8c789c76fc3a066b84a063945d76468afc8016605c4a34658b3c2c47787213bc0cc15fd4983cb8606fc9c1e","ssdeep":"3072:HJoNQIYvYo5CbDG+tEmgGUs9m3fx9XTjZL:HJcpeYo5CG+6mgGUvfx1N","tlshash":"8ea312add503c87284f616e5dede1df6e87487ae0ca50178ce652909cf05bafd122a0c","first_seen":"2025-01-28T12:57:32.241453Z","last_seen":"2026-10-03T18:12:07.402593Z","times_seen":615,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":23,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/StatisticNumber/1.mp4","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.755Z","timestamp":1791051079755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/StatisticNumber/1.mp4 HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncontent-md5: lTGR0M43RtYieryITRyRiA==\r\netag: \"953191d0ce3746d6227abc884d1c9188\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-tos-request-id: 30f11a85eb5650ea6a85eb56-a7b3460\r\nx-tos-response-time: Wed, 19 Aug 2026 17:43:50 GMT\r\nx-request-ip: fdbd:dc61:e:572::194\r\nx-response-cinfo: fdbd:dc61:e:572::194\r\nx-response-cache: miss\r\nx-tt-trace-host: 0188345226db5e6958cf77f36ad6445047b5df43e1ede041cae8d7d1f90f882ecaf479bcfdf856f58e10df64accde7a3141496b80ce13181e28d89ce15b88c83b7da1594827ef4212453ce9367ce063ae5d2fd3060e482d988fa66eccd37392db55278e318c81031b2d34040ff9554c34c\r\nx-tt-trace-id: 00-26082001435052641475C306F504BBCD-56D4BE8F55FDD002-00\r\nserver: TLB\r\nx-tt-logid: 2026082001435052641475C306F504BBCD\r\nx-origin-response-time: 175,104.77.144.89\r\nx-akamai-request-id: 52ead74.7b8b3d3\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:20 GMT\r\ndate: Sat, 03 Oct 2026 18:11:20 GMT\r\ncontent-range: bytes 0-344042/344043\r\ncontent-length: 344043\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-116.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=16, origin; dur=0, inner; dur=103\r\nx-parent-response-time: 15,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":344043,"size_decoded":345650,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"953191d0ce3746d6227abc884d1c9188","sha1":"4d815bdd8ae1c8f366ea18b3712dc3f815c3c566","sha256":"8d14f425615fd88d6c58df03c6ec521ad18d3ad4c845f931ae3eecbcab4b8c4e","sha512":"fbc4b3461abee4ba3948ff432cecfa60b3894d68f1c682bde85a64cfa42a777ffd924652f2eaa6503d402136f18e662ac583abc49728e75ed1160340e8f1bed1","ssdeep":"6144:lJQid6qp2NOJTkHI4Q3FSW6za9X1hSAxFWHe96IMnZCaTuQYwFrfkDrry:lr5229jead1LxFWHtTuFw9Mvry","tlshash":"84741263e3c7593afeb4ae7640d080968d49009802fe4bcb7c8d9d164fd4ba91f64de9","first_seen":"2025-01-28T12:57:32.24802Z","last_seen":"2026-10-03T18:12:07.403233Z","times_seen":600,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":19,"receive":5,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/Store_page_new.mp4","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.750Z","timestamp":1791051079750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/Store_page_new.mp4 HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncontent-md5: y+8FYN5lA1fzC27aNOnFxQ==\r\netag: \"cbef0560de650357f30b6eda34e9c5c5\"\r\nlast-modified: Tue, 27 May 2025 06:41:37 GMT\r\nx-bdcdn-cache-status: TCP_MISS,TCP_MISS\r\nx-tos-request-id: 86761763a7b7ea586a63a7b7-a7b343b\r\nx-tos-response-time: Fri, 24 Jul 2026 17:58:19 GMT\r\nx-request-ip: fdbd:dc61:10:369::40\r\nx-response-cinfo: fdbd:dc61:10:369::40\r\nx-response-cache: miss\r\nx-tt-trace-host: 01ca58e75fedb8755968e46cd3025692b4bfc7dd339d83cac2cc6ba2eba353f03c82192def7a201db542801f020feb74ade7e5afedc826960aef05b76de01234515f2f69d85bfbc2a9bd021c814e9110c585e4e6e7b8c45953d6379b85492a2588\r\nx-tt-trace-id: 00-260725015815D45E7264D0086ADAC313-7D23CD5CDCBD16DA-00\r\nserver: TLB\r\nx-tt-logid: 20260725015815D45E7264D0086ADAC313\r\nx-akamai-request-id: 6b2829c.7b8b3cf\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:20 GMT\r\ndate: Sat, 03 Oct 2026 18:11:20 GMT\r\ncontent-range: bytes 0-831553/831554\r\ncontent-length: 831554\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-62.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=41, origin; dur=0, inner; dur=3522\r\nx-parent-response-time: 38,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":831554,"size_decoded":833095,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"cbef0560de650357f30b6eda34e9c5c5","sha1":"b5dc34a50e3dc3ef09f9afa17ba4a66228d0d95b","sha256":"1b9b48ce8bab227e7242cc829fe535f64ced5f9e876786c498e3c32692c5ed1b","sha512":"f8cf6586b04b8dec7d7ffd4c7616969495fb1a52688ee4805b4e5aeba060307a7acdc566e019b79b7b57a074af1d37b0c2bfba366c32076751bb03ff3513722b","ssdeep":"12288:3+zHu5RNG6tShn3XHMhl+aUvg8Lz9GcctZI4bsak/WmkPpRCs/FxnSkTcxLhv:gO5WISBHI4vJ9Gcc9prFxnSD1","tlshash":"3a0523dbb2df6d9dcebd3732ac720643967bf945019483e7a66040f4a9f50692e180f8","first_seen":"2025-01-28T12:57:32.27221Z","last_seen":"2026-10-03T18:12:07.403902Z","times_seen":614,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":16,"dns":0,"connect":4,"send":0,"wait":47,"receive":31,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/shoptab.mp4","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.754Z","timestamp":1791051079754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/shoptab.mp4 HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncontent-md5: tZEIsBAj1beG6z5aizUw8Q==\r\netag: \"b59108b01023d5b786eb3e5a8b3530f1\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: b208716be42f9ea06a6be42f-fdbdgdccdgcde2g1701g0gfae4ge26cg8e33\r\nx-tos-response-time: Thu, 30 Jul 2026 23:54:23 GMT\r\nx-request-ip: fdbd:dc61:c:153::14\r\nx-response-cinfo: fdbd:dc61:c:153::14\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 0117a01e6f45889d1b149962fcc0bc55bda37ad645c2678db2ee2a34d34c1b8ceed9bb27f346446d4820e098ef9e59afdd267b0af9395567791e29328486d53dce4e9127340c945d31b24859d6e38016a5aae5b30d0500430403515ccf8de1a09d4f79699bc7f6ecbde36081f9a80b14ff\r\nx-tt-trace-id: 00-260801090145CBE616F243AC075C3D93-3DAD173781B2DE54-00\r\nserver: TLB\r\nx-tt-logid: 20260801090145CBE616F243AC075C3D93\r\nx-akamai-request-id: 6b4a5ed.7b8b3d0\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:20 GMT\r\ndate: Sat, 03 Oct 2026 18:11:20 GMT\r\ncontent-range: bytes 0-1104895/1104896\r\ncontent-length: 1104896\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-62.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=41, origin; dur=0, inner; dur=3\r\nx-parent-response-time: 41,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":1104896,"size_decoded":1106490,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2acdd6b1d469e23e5633e558ab29e2d3","sha1":"352929ffe5f32eb0aa9d071032d457b40fc2b8d2","sha256":"c16175227ab495ac2272bc2472e1d470fca3935983c5908abe5dd6113a7c030f","sha512":"0466f354e4ac9656b8c0f5aa887a8cec2c0c2c434b252e722f30ca4aaa980e429a6d260ad814ddbe1e08da18eb7add194cb31ca85b16c0ae946a76581fd68a86","ssdeep":"24576:+tFerzd/+CBXQnQMwa1Qpno2PG7JarFJs1+ltwqK7:+tF+d/+NnQMwa1Q68GVoFJsIltq","tlshash":"bd25334887ce7497ffb542f0235a5fa4962bdc44249c13f3065b807e27ab62524f4abd","first_seen":"2025-07-26T16:59:32.404364Z","last_seen":"2026-10-03T18:12:07.404492Z","times_seen":401,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":16,"dns":0,"connect":4,"send":0,"wait":72,"receive":24,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:20.993Z","timestamp":1791051080993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tapw2ohj.sanpinjia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 440341\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-03T21:33:35.001994Z","times_seen":349965,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":28,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/shoptab.png","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.724Z","timestamp":1791051079724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/shoptab.png HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 171745\r\naccept-ranges: bytes\r\ncontent-md5: NSGUpPbKJ+LOAt0oOQE7zg==\r\netag: \"352194a4f6ca27e2ce02dd2839013bce\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: cbe44c5e536e8f0f6a5e536e-ad91591\r\nx-tos-response-time: Mon, 20 Jul 2026 16:57:18 GMT\r\nx-request-ip: fdbd:dc61:c:17::18\r\nx-response-cinfo: fdbd:dc61:c:17::18\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01bd2a824afced70eafc5f952801f59c2ddf153281d285d468c6a39cdc47f2fd5087e9a34fb0e88bb5e5c3b4d49f7d7c7d6d50188a2a0f2a018a72b799599400cc072eed6dfdc2ac57ee013a46b9f6881b43f4e58028867c8941946d4789c1c63afbe684c986c9e9cde09e24e64ee3c63e\r\nx-tt-trace-id: 00-2607270941591EE997EC6849E0177CFC-1D3EF0F1B1C6A616-00\r\nserver: TLB\r\nx-tt-logid: 202607270941591EE997EC6849E0177CFC\r\nx-akamai-request-id: 52eabd9.7b8b3b1\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-116.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=30, origin; dur=0, inner; dur=2\r\nx-parent-response-time: 28,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":171745,"size_decoded":173268,"mime_type":"image/png","magic":"PNG image data, 542 x 962, 8-bit colormap, non-interlaced","md5":"352194a4f6ca27e2ce02dd2839013bce","sha1":"d0eba6e3b449d805b79022de363dd0fc9c0f4bcd","sha256":"ecf350ce1e8df5d2827513c7969c3939af605da252e20179af6d3a9549700ea1","sha512":"46cc8929bf766ce1f320fbe5bac76830c1aefaed05e12a1296f1b3dfd1b050a5a5adf2fe5193b246a582047dea5ea947bcbd7b1241dae1b8164f09264c4147a1","ssdeep":"3072:vQ4SRDBViICeRHScdN4ufv1cc/bJJhOU3iqo+7kcU808upjQYG56mcNSAMRF9aa:vzSRD7/Cex9z4yOobPY8iqockn8lu9QF","tlshash":"0cf313a0e6c3b58675933eda4ece1e0b294674d1ad33ac61253b7a11054ce39b93ff02","first_seen":"2025-01-28T12:57:32.24007Z","last_seen":"2026-10-03T18:12:07.405754Z","times_seen":615,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/a5541bc32521444297734d1941980fb1.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.725Z","timestamp":1791051079725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/a5541bc32521444297734d1941980fb1.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\netag: W/\"692-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":692,"size_decoded":1135,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"ff07113820ad52c6e5c0f75c21428f3b","sha1":"271ed7252f4d39d46d2ef4e48edf2b04c27b67ec","sha256":"976c68a350447bfd3796db2baae82188c022cf70d5c409e0879a2e6008e5fc7f","sha512":"6fef03bb55bf09f188ac672f38143bfc9c3dd605c09b2a9ca96f638b944ff76ad64c1efe46b6c635b456fbc8521a645253e15287a5570ac8a9108ee558e19851","ssdeep":"","tlshash":"210144c7c9913476f9d2fc7142bda801cc18df3a4e228113491884f66165b43b95e7bf","first_seen":"2025-01-28T12:57:32.307069Z","last_seen":"2026-10-03T18:12:07.406705Z","times_seen":600,"resource_available":false,"data":null}},"time_used":1416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/mp4/TKMALL_ZIP.mp4","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.744Z","timestamp":1791051079744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/mp4/TKMALL_ZIP.mp4 HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 16748855\r\netag: W/\"16748855-1749268218000\"\r\nlast-modified: Sat, 07 Jun 2025 03:50:18 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-range: bytes 0-16748854/16748855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131072,"size_decoded":131545,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"7e282f71b4b2011ca8102112c4cb357b","sha1":"79f1fa82d7b7f35900007b635fbefb6c20cbaa3b","sha256":"3c99cb6143ec471b2fc9805aeac77ea6ce5c78a6b0785465031fa7ca249c8be9","sha512":"e38090da683871644828830f0a0e20a04f3411454f08e002ed1b6c317288670bfaf3dbbb4fa8d019e28542def15143473b66fdba2a607bf16cea3a601133257d","ssdeep":"3072:KHZWVnooy06f7HBs/CcufwvITkfnzbYPVdV4zFc1pMOG:gzXG/fiwvPzbMV8upMOG","tlshash":"00d31287dac42a4cef3413f7828349775cc0e50f96f88fef69051e2d529e2b419ad682","first_seen":"2025-03-06T08:59:22.877217Z","last_seen":"2026-10-03T18:12:07.407934Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":507,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/StatisticNumber/3.mp4","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.758Z","timestamp":1791051079758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/StatisticNumber/3.mp4 HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncontent-md5: 4H1t79Mq04BMA1tgc3uvQw==\r\netag: \"e07d6defd32ad3804c035b60737baf43\"\r\nlast-modified: Tue, 27 May 2025 06:41:38 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: b65de4793c4f47ca6a793c4f-fdbdgdc61g18g173gg42\r\nx-tos-response-time: Mon, 10 Aug 2026 02:49:51 GMT\r\nx-request-ip: fdbd:dc61:18:414::44\r\nx-response-cinfo: fdbd:dc61:18:414::44\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01566fe0dbad1a2eae87a645a695e1c33cff86aae688e7de4fe04cafdf2cf2c35cc3a694891fd03afc1d4bc9e23eda805bf39232ed71be0e6c29a701dbd709ae34319d44d5d6a71d22c1bda34bae18c3ad595035a8eadf20aa87081afe3d3de6a060a9e42a754f546cb3101651fc18a0a785954c1e849a317ae99f3ceb52560499\r\nx-tt-trace-id: 00-26081319064289E46A7E25DB71E3B306-0919088C2E787C83-00\r\nserver: TLB\r\nx-tt-logid: 2026081319064289E46A7E25DB71E3B306\r\nx-akamai-request-id: b7b619f.7b8b3ae\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-range: bytes 0-186491/186492\r\ncontent-length: 186492\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-102.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=18, origin; dur=0, inner; dur=2\r\nx-parent-response-time: 17,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":186492,"size_decoded":188102,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"e07d6defd32ad3804c035b60737baf43","sha1":"250d3a10c49077d62f168b0ce1d7b0d3f2653205","sha256":"077f3502a396fadd98a2daf1500b6d4a0788ed88d82cd0e3f3f503c078408590","sha512":"4f974d0324951f687a5ca7998033da50b70096220e7e809934149c103685843104163173e9b7551ad405e1515c03ce5b1cdafdea54ed8b3d183a3dc26b957772","ssdeep":"3072:t6qvF+fdgX2GwFo3X9oxNrEduhECunrw2c1MjH7a8R95TMlLfoYNAnVw+:gqNrf+xNr+w2coH7Fn7","tlshash":"6604f1f663e5297efd79bfb349f050832a07daa192b80bc7bd9d24404fa16950f01d98","first_seen":"2025-01-28T12:57:32.252897Z","last_seen":"2026-10-03T18:12:07.409257Z","times_seen":622,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":20,"receive":3,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:20.996Z","timestamp":1791051080996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tapw2ohj.sanpinjia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 440341\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-03T21:33:35.001994Z","times_seen":349965,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":36,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:21.001Z","timestamp":1791051081001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tapw2ohj.sanpinjia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 440341\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-10-03T21:33:35.001994Z","times_seen":349965,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":48,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T18:11:18.634Z","timestamp":1791051078634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"19354-1754492697000\"\r\nlast-modified: Wed, 06 Aug 2025 15:04:57 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19354,"size_decoded":4997,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (414)","md5":"0989c2ff2355d6252b66459adb239a20","sha1":"fbf0412213450bb926579a39ca912d9d4f8b1e8a","sha256":"e0798c39e2ef75c5daacaba7ee627a1534863fd7a060020ae17eb9def4dfa51f","sha512":"224169b82b9793198e75a2a8073263c46453a52e8f2dbc6a97ff08f96fea6a8c4d578afedd28e07c2f3d2df3182c2db1ddbe475100fcc4065124ff722a332823","ssdeep":"192:8CRb21eQeRj0hXi6Mru4UifeipYi4e4Vmbi6Q0SPHCfd9q/+TqpuqqCajRvp:8m0eTBru4fN5p4mu4S6l9aW4hQP","tlshash":"d9926222a4f1b073409382e26b312b6b7fe0d597d65a8108b5bc43d85fd2d82dd2b56f","first_seen":"2025-08-09T01:18:23.960098Z","last_seen":"2026-10-03T18:12:07.410304Z","times_seen":129,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":2,"connect":208,"send":0,"wait":210,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/js/lib-polyfill.144bde91.js","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.671Z","timestamp":1791051079671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/js/lib-polyfill.144bde91.js HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"247143-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247143,"size_decoded":78941,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4d409a82f1fd1ccdb4146719442dc76f","sha1":"513830bb776dc7f35be3c4259dabcac2b5c3aab8","sha256":"c5425790d0cba801d53c4e17a27acb6897f5b3908397ef6f803140dfb408b003","sha512":"806134eebc7ff56dfaf3e8d0ba7089aba86c57599e490edcb5b87221b7598aa2a35587a5b12443b2ed14acd0c66d9ba8c6e0ab1c787a984e9e8ab49a02774e78","ssdeep":"3072:la0q8CJLo4Mhy7a2O+MqOTkhMaJt+iFjvGW:m8YwhycmjjvGW","tlshash":"dd34b988b292f0e64bf264d4407f8407f1771a64a44da851ffa1d884687bd4fb07babd","first_seen":"2024-09-28T07:23:58.455437Z","last_seen":"2026-10-03T18:12:07.411067Z","times_seen":622,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tapw2ohj.sanpinjia.com/static/picture/left.png","fqdn":"tapw2ohj.sanpinjia.com","domain":"sanpinjia.com","tld":"com"},"ip":{"addr":"45.135.237.29","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.711Z","timestamp":1791051079711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sanpinjia.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:05:38 GMT","end":"Sun, 06 Dec 2026 10:05:37 GMT"},"fingerprint":{"sha1":"C4:E1:47:EE:1B:CC:B3:D9:DB:5A:3D:38:6F:B3:B6:75:E5:9E:14:87","sha256":"D4:6C:77:65:FE:AD:FF:F2:37:B6:31:18:F5:E0:69:FC:97:A8:15:36:55:2E:7A:5D:A9:5D:F7:7E:E1:41:16:1B"}}},"request":{"raw":"GET /static/picture/left.png HTTP/1.1\r\nHost: tapw2ohj.sanpinjia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"145246-1749197948000\"\r\nlast-modified: Fri, 06 Jun 2025 08:19:08 GMT\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145246,"size_decoded":145661,"mime_type":"image/png","magic":"PNG image data, 480 x 857, 8-bit colormap, non-interlaced","md5":"5c66fb7a1859ee23fda3294f6b14b618","sha1":"2cb5600288ddaaaa457d90b3ad103361ce0b7ba0","sha256":"4874b02eaf38eca66078cad985de493f7f14872d42317c46a50145ec74ebc897","sha512":"13891e91d4447fcd7dc1c06c8578c7df1c993b8483b8d4ab3e408e9c009af5e3a3ce7d7c2a92acda2fbc975f6b92ae8fb41eed1bba49ea80e1a5b9bd402ba834","ssdeep":"3072:ziEtf/vcSa6jREJVDqdk2OUPAZtZafGsIz6P47Ed8LSO0t9p:mEtPXFWjqXOftZMUmSE+Sdt9p","tlshash":"b9e313c0e112151ec29efde11eed4c77986a350ef6198ac6dc054b278df3f4289d1a7a","first_seen":"2024-11-19T07:54:21.395524Z","last_seen":"2026-10-03T18:12:07.411649Z","times_seen":533,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"tapw2ohj.sanpinjia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-03","alert":"Phishing Block","trigger":"tapw2ohj.sanpinjia.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p16-oec-sg.ibyteimg.com/tos-alisg-i-aphluv4xwc-sg/876feebbbebd4e1290264d966eac158e~tplv-aphluv4xwc-origin-image.image","fqdn":"p16-oec-sg.ibyteimg.com","domain":"ibyteimg.com","tld":"com"},"ip":{"addr":"95.101.10.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.730Z","timestamp":1791051079730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ibyteimg.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 22 May 2026 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:60:C3:63:69:24:58:C4:01:5E:54:E5:75:FF:CF:3C:04:2A:A9:7C","sha256":"EB:85:E6:6E:4A:2A:32:62:81:76:48:59:57:8F:21:E5:E6:92:6A:5D:EB:F6:F7:49:A5:5C:24:C0:CD:44:5D:2D"}}},"request":{"raw":"GET /tos-alisg-i-aphluv4xwc-sg/876feebbbebd4e1290264d966eac158e~tplv-aphluv4xwc-origin-image.image HTTP/1.1\r\nHost: p16-oec-sg.ibyteimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 4171\r\nimagex-fmt: png2png\r\nlast-modified: Thu, 27 Aug 2026 10:40:08 GMT\r\nnw-session-id: 202608271840075AB1C11628DF50DC2B18682kd14df\r\nnw-session-trace: 2026-08-27T10:40:08.001798423Z 103\r\nx-bdcdn-cache-status: TCP_MISS\r\nx-length: 4171\r\nx-powered-by: ImageX\r\nx-response-date: Thu, 27 Aug 2026 10:40:08 GMT\r\nx-tt-logid: 202608271840075AB1C11628DF50DC2B18\r\nx-request-ip: fdbd:dc53:2:791::22\r\nx-response-cinfo: fdbd:dc53:2:791::22\r\nx-response-cache: miss\r\nx-tt-trace-host: 01f556d7beebc1d70d005dbcc8b1b6f6d55f446491148f0051c514e227878272f0928739be10e0962be466660301ea66605a49c7b110d86f2e68a999e50e2de781d2035915a5eb50acf01c26ab47c8cd791b0a62634de9b8a662f5565967fcd3c851980af8ebeb5c7d5c6fc2584e743482b68119e862b521a23b1a9ada507f6641b5ba4c284fd2d98010cb0de45c25dca7\r\nx-tt-trace-id: 00-2608271840075AB1C11628DF50DC2B18-18570070664A1433-00\r\nserver: TLB\r\nx-parent-response-time: 230,2.22.30.217\r\ncache-control: max-age=31491050\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\nx-cache: TCP_HIT from a95-101-10-76.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0, inner; dur=108\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nx-akamai-request-id: 8a47696\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4171,"size_decoded":5611,"mime_type":"image/png","magic":"PNG image data, 440 x 440, 8-bit colormap, non-interlaced","md5":"abe0088d07fc512411dba1d0bf7e2ee5","sha1":"5872102d04cc79112f0675bd5408fc617c5a69df","sha256":"a357c0909db08ce5e90199620704c113ec5d2ad2907d9dafe54753736694558f","sha512":"b7e753c422c99cfe765e2cac85976539e94d52cff60239be3c2eeb33dafafd7ca547a63bd6e3fc3b1b58ae72d96a083498e6af285e04b39fed944b39c8ba5178","ssdeep":"96:a5TZxwxQ+AY1DDKnLVbyqyUHAM54CusQsen+ce/8w9YLTyie2ZePS6ZB:a5dxw3ObIUBKSenjeEw9UyTxL","tlshash":"c781a0b3414a9711fe31bb7d2276089ea1e0d774e8067a47b0a0d51f39efc146800911","first_seen":"2025-01-28T12:57:32.261729Z","last_seen":"2026-10-03T18:12:07.412314Z","times_seen":615,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":24,"dns":0,"connect":3,"send":0,"wait":3,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf16-va.tiktokcdn.com/obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/LIVE_Shopping.mp4","fqdn":"sf16-va.tiktokcdn.com","domain":"tiktokcdn.com","tld":"com"},"ip":{"addr":"2.22.55.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:19.746Z","timestamp":1791051079746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tiktokcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 31 Aug 2026 00:00:00 GMT","end":"Wed, 17 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"28:22:46:5B:C5:AC:37:C0:91:C3:49:26:31:BE:54:D7:29:FF:D7:BD","sha256":"BC:25:1B:88:04:AB:DB:FD:38:36:0F:FC:8B:FC:2A:43:42:A9:9E:7A:8D:1B:D2:77:C3:F3:71:17:3E:03:E7:D6"}}},"request":{"raw":"GET /obj/eden-va2/shayvW_Z[[/ljhwZthlaukjlkulzlp/CommerceSolution/LIVE_Shopping.mp4 HTTP/1.1\r\nHost: sf16-va.tiktokcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tapw2ohj.sanpinjia.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: video/mp4\r\naccept-ranges: bytes\r\ncontent-md5: V3Gmdrs/dOcI4l6hFKwuUw==\r\netag: \"5771a676bb3f74e708e25ea114ac2e53\"\r\nlast-modified: Tue, 27 May 2025 06:41:37 GMT\r\nx-bdcdn-cache-status: TCP_HIT\r\nx-tos-request-id: 7bc74f80ddf0baa96a80ddf0-fdbdgdc61g18g173gg48\r\nx-tos-response-time: Sat, 15 Aug 2026 21:45:20 GMT\r\nx-request-ip: fdbd:dc61:14:355::159\r\nx-response-cinfo: fdbd:dc61:14:355::159\r\nx-response-cache: edge_hit\r\nx-tt-trace-host: 01354ab3e1a0a88223aaf19094f5897630360d95c6202806d7eb0b48d6f18ce049ad4cecfcfced74c9ad98b4aca98680b56f231d0473b0bff08c8b0acde624aead26d2f4e814881c2f7477795824afa619119b1693d8acc0e98e15aef4d4f654b22579fe54cb5a0a3045022bbc366e1dec4033dd1cff10383fd830548d1eff7454\r\nx-tt-trace-id: 00-260819200640FB92ED22D098FBF7508B-09BE16F796789E0D-00\r\nserver: TLB\r\nx-tt-logid: 20260819200640FB92ED22D098FBF7508B\r\nx-akamai-request-id: 59262c1.7b8b3af\r\ncache-control: max-age=2592000\r\nexpires: Mon, 02 Nov 2026 18:11:19 GMT\r\ndate: Sat, 03 Oct 2026 18:11:19 GMT\r\ncontent-range: bytes 0-873047/873048\r\ncontent-length: 873048\r\nx-cache: TCP_MISS from a2-22-55-93.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)\r\nx-cache-remote: TCP_REFRESH_HIT from a2-22-55-22.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (S)\r\nx-tt-trace-tag: id=16;cdn-cache=hit;type=static\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=19, origin; dur=0, inner; dur=140\r\nx-parent-response-time: 11,104.77.144.91, 16,2.22.55.93\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-check-cacheable: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":873048,"size_decoded":874679,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"5771a676bb3f74e708e25ea114ac2e53","sha1":"e702e99eb079a4376b2919bad8a2351fb2bdb7bf","sha256":"2a7d7561479f5bcf35eb657be79e20464c1852ec40fa411edc280e4e71cbd2be","sha512":"137f05a0f5331cfc955a543b76965e025746f29976ff23eeec3825538cacdeab4af746acccc9ed4bcd353ba51a6c60ac8269bacf80c38a0d258245ad900e1329","ssdeep":"12288:qChmB2caCHktyXVAmChWJcbx/+RpEjotDgmpjbSQngpFyiDtCFN6Pfvq8mq/aDMW:K2clHkOVAxfx/+Runmp9ngpFygYFWaYw","tlshash":"bc05336721c73356c808913f3347016bfe71ee9ba12f83fb1a566ac88d631ec6895476","first_seen":"2025-01-28T12:57:32.263448Z","last_seen":"2026-10-03T18:12:07.412965Z","times_seen":605,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":24,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tapw2ohj.sanpinjia.com/","date":"2026-10-03T18:11:20.987Z","timestamp":1791051080987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tapw2ohj.sanpinjia.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:51 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 440250\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-03T21:35:45.73062Z","times_seen":566389,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":19,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}