{"report_id":"38645687-2dd4-4e3f-8afc-cba03eed6ee0","version":0,"status":"done","tags":[],"date":"2026-07-07T03:05:04Z","url":{"schema":"http","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":0,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"title":"国产精品福利在线观看免费不卡_精品国产一区二区三区免费_国产精品亚洲综合久久_久久久久亚洲精品中文字幕天堂_日韩视频一区二区_日韩视频一区二区_中文字幕一区二区三区日韩精品","dom":{"size":29345,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25670), with no line terminators","md5":"770b8e74ec14ba3caf18d81889f1b2b8","sha1":"0a3e7a775ef8990f6516456d6c8a82041e7f1098","sha256":"6e8fc8878fa1b249e31282b00b9bf2ff46504f510c0dd8eee9ceb5c6d66921a4","sha512":"42c37e6040436b925a67919b240fb4d9c686348980e282f7c4ee66cbf5e2ae3d96afc38db9e44d1a84948a53d91cbcd42d00b990aff9fc0d543f504d235dc046","ssdeep":"384:Tcf5TC3Wq2+A5CpQTj+feoRf59D9TBp05Qsjy9ZsPVS:q2ZlpHQ9EZsPVS","tlshash":"02d27472508b6137113788daf1b56b2db1e7924dce23480376fc53ee9bc4d92998bc89","dom_hash":"domhash2dc852acf30fa30ccc0b886799650b6d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":0,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T03:05:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fa.sl260204.top","ip":{"addr":"172.67.68.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-03-28T01:44:02.335097Z","last_seen":"2026-07-06T01:58:49.421519Z","alert_count":0,"request_count":2,"received_data":39726,"sent_data":1164,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"u1.sl260521.top","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-05-21","domain_rank":0,"first_seen":"2026-05-23T06:56:42.809403Z","last_seen":"2026-07-02T06:56:08.582114Z","alert_count":40,"request_count":20,"received_data":0,"sent_data":11640,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kh3aq.cc","ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-05-03","domain_rank":0,"first_seen":"2026-07-06T01:58:47.417675Z","last_seen":"2026-07-06T01:58:47.417675Z","alert_count":0,"request_count":4,"received_data":176057,"sent_data":1748,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"jxqc99.com","ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":21,"request_count":7,"received_data":267517,"sent_data":3432,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sbzytpimg1.com","ip":{"addr":"23.140.204.9","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-24","domain_rank":160397,"first_seen":"2024-07-25T07:47:58Z","last_seen":"2026-07-01T10:10:05.695224Z","alert_count":0,"request_count":2,"received_data":53641,"sent_data":1172,"comment":"","tags":null,"fingerprints":null},{"fqdn":"spdf.zbczce.com","ip":{"addr":"82.29.53.91","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-08-29","domain_rank":4487683,"first_seen":"2025-07-16T01:19:40.851138Z","last_seen":"2026-07-02T15:42:43.867852Z","alert_count":0,"request_count":1,"received_data":151615,"sent_data":560,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"node95.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":0,"first_seen":"2025-09-01T19:35:10.81398Z","last_seen":"2026-07-03T22:03:28.908958Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.2.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-09","domain_rank":15876,"first_seen":"2021-09-20T12:34:55Z","last_seen":"2026-07-02T22:12:23.252524Z","alert_count":0,"request_count":1,"received_data":29702,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"op2.sl260630.top","ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-06-30T19:37:28.087694Z","last_seen":"2026-06-30T19:37:28.087694Z","alert_count":20,"request_count":20,"received_data":4007508,"sent_data":11660,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fm.sl25914.com","ip":{"addr":"172.67.205.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-15","domain_rank":0,"first_seen":"2025-11-23T09:22:03.198801Z","last_seen":"2026-07-06T01:58:48.489551Z","alert_count":0,"request_count":5,"received_data":185932,"sent_data":2905,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"b.hbz8v.com","ip":{"addr":"3.9.176.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-04-16","domain_rank":0,"first_seen":"2025-06-19T19:59:56.529555Z","last_seen":"2026-07-02T02:50:14.440996Z","alert_count":0,"request_count":4,"received_data":5562,"sent_data":1974,"comment":"","tags":null,"fingerprints":null},{"fqdn":"czguii.com","ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2026-05-06T10:02:32.870954Z","last_seen":"2026-07-02T02:50:13.391906Z","alert_count":0,"request_count":4,"received_data":176061,"sent_data":1756,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sbzytpimg5.com","ip":{"addr":"23.140.204.9","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-24","domain_rank":0,"first_seen":"2026-04-03T09:15:17.821599Z","last_seen":"2026-07-02T23:40:43.598508Z","alert_count":0,"request_count":1,"received_data":116972,"sent_data":586,"comment":"","tags":null,"fingerprints":null},{"fqdn":"node91.aizhantj.com","ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2024-07-29","domain_rank":4549453,"first_seen":"2025-05-08T02:39:02.894071Z","last_seen":"2026-07-06T01:58:48.171848Z","alert_count":0,"request_count":2,"received_data":36764,"sent_data":1161,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55c161511eb6533567bd8025c6dc6560","sha1":"3c2aaa8ed44a19fac6da7f38049fa464b4a145ca","sha256":"54459d45384d5f630648f9ccbdb7e8041a31678ebbd46691f9e47c6603bcba61","sha512":"08d3ff02b92e5f3e45fe41d680ab59b50d369cfa6d82efa46ccb19020c8ca916ff24c11fb30d6679b71c3682c22924744dc6c654770a547405f6218d78312d31","ssdeep":"","tlshash":"ac11462d2322a03df55ad036567d0f5caa6eb7609414700a8c4e096e9de090bc6b6e9f","size":1109,"data":"","first_seen":"2026-06-03T17:13:31.012998Z","last_seen":"2026-07-07T03:05:14.985052Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"94256670bcf263506d5068d541a501b8","sha1":"5aed9cf051ff77ec4bdb0c71793b677c08314b71","sha256":"4f29ba1ac1b86ce6bb8d33265be1f97830c3c94d745a3b1e6d0d828c5d681aa5","sha512":"3dbbb2ceadeb7956bd8423f126a429ae7c30c5d69e7bec0aeef386eb78aeaa408499ba628c6a74bd5514ece8f9513abad4b5e4caee96f7c7ec39774ed8eeda50","ssdeep":"","tlshash":"4f114f393b936061b68bb43d253f6e6c662f52d18b14401f44c909e9ad90e8bc3b3e52","size":1103,"data":"","first_seen":"2026-06-03T17:13:31.013802Z","last_seen":"2026-07-07T03:05:14.985539Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dff4543a897d9907d699ae093841554","sha1":"1e1aae71e55c5e9418b5bdd5831f3a6d079896f6","sha256":"033d3c999e3001acc7e9b639f2aa6dc2dda54bb07bd91643aafabd6f4d8ae84d","sha512":"a8737a359a4e76890edaab734e0a83b6ac7dc409d66aa4c2ea4d44d083f438eb953070ac609dc567bb6144db355537edd40f99d56ed448435a30b7edf5c994fe","ssdeep":"","tlshash":"57d0976b354008bae34b00b80daed28eb022203168aec001488cc6e94a20de9086c6cc","size":240,"data":"","first_seen":"2026-07-02T06:56:19.122514Z","last_seen":"2026-07-12T23:02:15.693759Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"887415d8bec2c0c8a89177364ff6249a","sha1":"1a0ca50653fe98879a170457e06c89ea5d1c33ec","sha256":"47c4ba5ff05a499a275a87036c3e53670346bad18063b1e05f3263271be71df1","sha512":"808b874588803b51ad8ed7f3b0b1d43abbbef114a1f0a8cc2dac2d83daef733cf3ab6a4affd962aea2d8ee4177f02369b52e809383fe4a3efa88fbb52f0270e2","ssdeep":"","tlshash":"29d0a76b755018e5d78a00b81d6ed6cab42151266cffc45148cdc9e99a30de9489dacc","size":240,"data":"","first_seen":"2026-07-02T06:56:19.123362Z","last_seen":"2026-07-12T23:02:15.692986Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-07-16T23:49:29.146957Z","times_seen":121726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.hbz8v.com/b8mp2e.js?sid=2730i?_=1783393472718","fqdn":"b.hbz8v.com","domain":"hbz8v.com","tld":"com"},"ip":{"addr":"3.9.176.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"faca3fb38cdb819fd25e3c94d292834e","sha1":"512548c92fbda34bc42bac62718a9c1e16e01110","sha256":"efd91607f210ebc1be6cd5e06b572f7d57e3ba832b98223ea4341464b9c1bc37","sha512":"f39bdc3c6f79ff6a82b045e26bbb5e46972e661570ac03f147ed75bda1660b8e0e5689d4e9569f7667a73f869ad3f962453691958c846b9012f3d5a4d813bfe9","ssdeep":"","tlshash":"6141738b30f3a0a1a1f321794eaf541cf1f76813154ee4e195550b892fa8a3d02afe88","size":2010,"data":"","first_seen":"2026-07-07T03:05:14.956195Z","last_seen":"2026-07-07T03:05:14.956195Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d0c5057f8579dab7c9b853c3d1204cc4","sha1":"092571e3599a68c8f8df69534a43242a68a0aeec","sha256":"c7e654a01c262d86524265789b374414f15ab7454e27d8f27a5ecfbba1b1fc21","sha512":"65775909b4aa92bdd88fb6119647bc86a20c4d0323140e08bc1a05f7efdb4cc3ce71e3871af21a42726cb7d58a7456f164ca3ba127d4c02d3fc98cddd32a3ef6","ssdeep":"384:AKvetVvf5TniT0RRM8OWFP224s502PGcCAWm/iqHOR:AKIvUT0RaIko10AWm69R","tlshash":"c6a2d5de6962092598b762e92ebe715c74b321132e29ca467e4dd0708f600b520ffdfd","size":22166,"data":"","first_seen":"2026-07-07T03:05:14.987691Z","last_seen":"2026-07-07T03:05:14.987691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kh3aq.cc/10/105c5c242730i?_=1783393472717","fqdn":"kh3aq.cc","domain":"kh3aq.cc","tld":"cc"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f5e1152e8bc4a5279519fbb1ff6e7a4","sha1":"3e7bb0330cf519bbcec1ae03d246a86e6b0244e8","sha256":"b521177572d36d2d97a192b7bca438641d960d864e5a8410b7537f28f8c3c890","sha512":"57f09d663f61e0c4ad459df5f30088eeed88f9a23a8d84e1368c33213c694dce236a0b1857589a85ed2b8a2335d7680220a6a423ffd5181bfd67af7b71d71f9c","ssdeep":"1536:Z/0M/UBWJjVKk82+xevE6CKQ51O6xVVFllR115sCAHb3fjXGOz5jRlRtsjZVA97L:NE6Qv/8vH7","tlshash":"e9831fd8a29ad15f2b8c4d43ee78aede50b5973791c5b347c398fa4d04ad24bc29c8c4","size":88703,"data":"","first_seen":"2026-07-07T03:05:14.957014Z","last_seen":"2026-07-07T03:05:14.957014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ae4a4042b4530617c2b317c0988b06a7","sha1":"2a2ed02a0bb6e6e0b80d7911cc90aa2aba3e2a91","sha256":"32abdc58e4f3cc2cea1b0ece60b70203a93426dcfed83d42d1608b5123ac5aa4","sha512":"7b7739d7388d17108a3e1c349facc9ed3abdd735a1f41a7e81dfddb38d56d2111913a7e08ce8438fcd63522ac5ed6631632e62710f8b4dfccfa9f1b7f00f00a2","ssdeep":"384:AKvetVPhNGwpTDqyu+mer22ksl2Zs/TaTC3iigsv/UnX57:AKIPh5Ti+mp2ks8YTF3L7S57","tlshash":"5aa2d7ad6aa2152494b671e96fbf314cb07320032d19ca067b5cd1708f710b925bbdfe","size":21562,"data":"","first_seen":"2026-07-07T03:05:14.988508Z","last_seen":"2026-07-07T03:05:14.988508Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.hbz8v.com/b8mp2e.js?sid=2745i?_=1783393472719","fqdn":"b.hbz8v.com","domain":"hbz8v.com","tld":"com"},"ip":{"addr":"3.9.176.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d56502bf5d9431ed64dcec15e881dd8","sha1":"a529d52840d5e9631e3da082132c4fe81f07dfd8","sha256":"daba173e9e2098d024c4cd388efb1177f40bb7349f74461be68ce0e9e8d26390","sha512":"5d82e88228b398f603d32de3a90cecff5853d065d8e1dbd0840674fbe21a4d0ad58affe4adee8a19beda5070fe46257d5b66fd50b2fdd65c3ca60109f5273a53","ssdeep":"","tlshash":"3e41548f70f3a061a1b71179496f542cf5b76c23114dd4a195540ad92f58a2d42aff88","size":2010,"data":"","first_seen":"2026-07-07T03:05:14.976162Z","last_seen":"2026-07-07T03:05:14.976162Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/5/1049cb002745i?_=1783393472719","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d73a0cc7a28be1aca9c5d6a6bcde675","sha1":"ae79c54dc2e8fce941ffa7565e27498e5658e2a1","sha256":"900da85efa6cb88f4d1f6814687923dfbc9bfe7f9f33db9a48be99f3e1e1aa48","sha512":"eb4ade0f6d56b98d3650f27132f93638c62edd7f72919438befc8c6e5f70b28a2b3e2720f9909aa39463869b79ed435f8299c3c6558dc3fa028e2963f0b1d993","ssdeep":"1536:p/0M/UBWJ8VKzl2dxi8Qoal6QkVVFllR1I5sCFya37oiHWS8sj+tFhIOMohyJN5p:z14Rayq","tlshash":"3e831fd4a29ae15f2b8c4d43fe78aede50b5972791c5b347c398fa4d04ad24bc29c8c4","size":86287,"data":"","first_seen":"2026-07-07T03:05:14.955212Z","last_seen":"2026-07-07T03:05:14.955212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kh3aq.cc/5/1049cb002745i?_=1783393472719","fqdn":"kh3aq.cc","domain":"kh3aq.cc","tld":"cc"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d73a0cc7a28be1aca9c5d6a6bcde675","sha1":"ae79c54dc2e8fce941ffa7565e27498e5658e2a1","sha256":"900da85efa6cb88f4d1f6814687923dfbc9bfe7f9f33db9a48be99f3e1e1aa48","sha512":"eb4ade0f6d56b98d3650f27132f93638c62edd7f72919438befc8c6e5f70b28a2b3e2720f9909aa39463869b79ed435f8299c3c6558dc3fa028e2963f0b1d993","ssdeep":"1536:p/0M/UBWJ8VKzl2dxi8Qoal6QkVVFllR1I5sCFya37oiHWS8sj+tFhIOMohyJN5p:z14Rayq","tlshash":"3e831fd4a29ae15f2b8c4d43fe78aede50b5972791c5b347c398fa4d04ad24bc29c8c4","size":86287,"data":"","first_seen":"2026-07-07T03:05:14.955212Z","last_seen":"2026-07-07T03:05:14.955212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node91.aizhantj.com:21233/tjjs/?k=y3n5k8rpsl9","fqdn":"node91.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e051c0bc8bd0b9b85140f676391173b6","sha1":"4af8f21ee35dea56e7d1cd5fcebe5ec7c4b702dc","sha256":"bde372de81154372b9acb45231af14a4899e2a059d71f08a822694ede51a17eb","sha512":"c942429adde488eb7ba3f81c7d334f275950b446d6b3d26e4360439714a5b9bd8439ad9424e90d435ce301f8f153222e83293701c976865fb0750975cd89fbe6","ssdeep":"768:ekS5kuNczE4rDE93/VrWpWdk2pByX5h0N:ZSOyczE4rDE93/Fg+Bk5h2","tlshash":"c8f2e8d632ce2536a2767099d95ff50cf8b9aa1437d9ac44590cc0c46d208ba83ff9bd","size":35703,"data":"","first_seen":"2026-07-07T03:05:14.973597Z","last_seen":"2026-07-07T03:05:14.973597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/10/105c5c242730i?_=1783393472718","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f5e1152e8bc4a5279519fbb1ff6e7a4","sha1":"3e7bb0330cf519bbcec1ae03d246a86e6b0244e8","sha256":"b521177572d36d2d97a192b7bca438641d960d864e5a8410b7537f28f8c3c890","sha512":"57f09d663f61e0c4ad459df5f30088eeed88f9a23a8d84e1368c33213c694dce236a0b1857589a85ed2b8a2335d7680220a6a423ffd5181bfd67af7b71d71f9c","ssdeep":"1536:Z/0M/UBWJjVKk82+xevE6CKQ51O6xVVFllR115sCAHb3fjXGOz5jRlRtsjZVA97L:NE6Qv/8vH7","tlshash":"e9831fd8a29ad15f2b8c4d43ee78aede50b5973791c5b347c398fa4d04ad24bc29c8c4","size":88703,"data":"","first_seen":"2026-07-07T03:05:14.957014Z","last_seen":"2026-07-07T03:05:14.957014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260704-1/5ed71679a23f4bf296083bb62559607a.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.162Z","timestamp":1783393472162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260704-1/5ed71679a23f4bf296083bb62559607a.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4891b9-3fe51\"\r\nexpires: Mon, 03 Aug 2026 08:41:52 GMT\r\nlast-modified: Sat, 04 Jul 2026 04:53:13 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 238959\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrY6XuNigoVN9Dtivx1r%2B9OBfaLotiDGxmaHlwvQzFQrWfOIijRwO9LD2n22LOOtuwgqW3Co%2FE70DZMpHs%2FHLUaIOknx2rTEy3Uos7NVFdw4xuBsQX6TAGFBMuKgwaLP1SMN\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511897a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261713,"size_decoded":262161,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"8a673021b28d91a4aefe1a5561b4bfd6","sha1":"7c1146d5e6333ac7ff0645a97091cc9a3eb1f357","sha256":"f3570ebe5cfb51b6aea4c6aab549e74844b2344952045ef1c2ac596ffc6178be","sha512":"237ac90e533754eceaff29738723c7d9dd616b1cb1a760960ac88324a66fad16b51e49933b2d593bb0bc287d9dbef10a5e0f3ce5c5d795a53a8a1ea35f6c070d","ssdeep":"6144:0a6EHCCdD3AtuWgjppVEzB+W/G7clywD0UnryTTaNr+/QBoC:0a6QCp0KfOhwJnrFNr+/QB1","tlshash":"31442326e857925099ff64fdc8e8c4f8aabef412b0473e324486f85952e42697153ccf","first_seen":"2026-07-06T01:59:00.587187Z","last_seen":"2026-07-07T03:05:14.951994Z","times_seen":5,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fm.sl25914.com/upload/vod/20241122-1/01273b64e7f30ba0f88773c28a9851d5.jpg","fqdn":"fm.sl25914.com","domain":"sl25914.com","tld":"com"},"ip":{"addr":"172.67.205.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.170Z","timestamp":1783393472170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl25914.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 15:59:39 GMT","end":"Fri, 07 Aug 2026 16:57:20 GMT"},"fingerprint":{"sha1":"68:87:8C:7B:DE:D3:1A:11:17:DB:3E:45:E4:91:14:28:26:52:D3:97","sha256":"D8:6A:F2:7B:42:5B:E3:8D:3D:09:D3:B8:A9:9F:EA:C6:13:B4:02:06:5F:8D:63:83:32:B1:2E:63:0A:35:27:50"}}},"request":{"raw":"GET /upload/vod/20241122-1/01273b64e7f30ba0f88773c28a9851d5.jpg HTTP/1.1\r\nHost: fm.sl25914.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: \"69f32b31-20cd5\"\r\nexpires: Sun, 02 Aug 2026 13:15:32 GMT\r\nlast-modified: Fri, 03 Jul 2026 13:15:44 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\nage: 258713\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTtejIUSfkb73GgJY%2FPrZ7AT0AEIjXqsi%2ByUCy%2B1qJgdG6xhistlZ8nykIo30VIbfO8HfiUus0vnDflmwWdbN2k1GC2bu8SQl%2Bj1GwzeIrcJiFy%2FAxQsfgZLuRIH6mIiqQ%3D%3D\"}]}\r\ncf-ray: a1739f513bccb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134357,"size_decoded":135137,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x334, components 3","md5":"cdd7b93503af1c8819e3d2f1cf8f447d","sha1":"2224cc19c912281ca5d53a8034ce267d5fd892e9","sha256":"2a32d5b3b45407625a2be9408f1bd466417209fe0f338bf97b2ed227d9bdc3b0","sha512":"108c85b5b6fb3909e99401cb65aa7e7cebdd9e271c5120768bbc025220451191336bcf805e366bb03daa99932a8014b603c3583d61a6a65a5c3177b8c15dadfc","ssdeep":"3072:Mkf3t+s/4KZ1JrsnCFWs2tLBe8B0bUFVp7:lrponCT65p7","tlshash":"f5d31299d242c9eb9597a8e6173a5c5d8ee3a3c343f134c4241e423af2e33e7b56c911","first_seen":"2026-07-06T01:59:00.543251Z","last_seen":"2026-07-07T03:05:14.952651Z","times_seen":5,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fm.sl25914.com/upload/vod/20250622-1/aa17979c2cfe8fa07eba6c309a1b9cb8.jpg","fqdn":"fm.sl25914.com","domain":"sl25914.com","tld":"com"},"ip":{"addr":"172.67.205.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.172Z","timestamp":1783393472172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl25914.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 15:59:39 GMT","end":"Fri, 07 Aug 2026 16:57:20 GMT"},"fingerprint":{"sha1":"68:87:8C:7B:DE:D3:1A:11:17:DB:3E:45:E4:91:14:28:26:52:D3:97","sha256":"D8:6A:F2:7B:42:5B:E3:8D:3D:09:D3:B8:A9:9F:EA:C6:13:B4:02:06:5F:8D:63:83:32:B1:2E:63:0A:35:27:50"}}},"request":{"raw":"GET /upload/vod/20250622-1/aa17979c2cfe8fa07eba6c309a1b9cb8.jpg HTTP/1.1\r\nHost: fm.sl25914.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"686410eb-5d55\"\r\nexpires: Fri, 31 Jul 2026 14:58:59 GMT\r\nlast-modified: Tue, 01 Jul 2025 16:46:35 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 475532\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0pUZjaUX525ucWBTq%2FbOUlxgrTbcax2OOEEtkJ%2FBL53mSlFJoWw9TzJe9sO9YJGhqqbJVz17p%2BUdWyAQ%2Bp3Oe1J%2BtHCBRmVX4tfM9D8w3GvFLbl4mSSzo6P5nZnj91Kqg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f513bcfb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23893,"size_decoded":24592,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 600x337, components 3","md5":"cf8bddbbdc59a0462894351dd86486b8","sha1":"4def654b2aec1fb5997268658a9186ede013c13f","sha256":"362f9cacbc53563b3ffb5e21f9eee837cfd1b81bf0ef9a7797c3c13003a04aad","sha512":"72c61372b58e23dbb762ba609762467c0bf87bb6c84770c4fa1bddd492c36c3f12981642cf341f8a4a27cc376d109c1ec40360321d69d62ead92e700e5ebd274","ssdeep":"384:n0w53ofLIqxfsq/NsI3MKJ9T4ojEpQkWfe8OCDCbwP8nPOhd9whg8ZPVAYe2:n0S3ofHJJh/Epcfbf+wi2dqhgWPVAZ2","tlshash":"5eb2e100a1b8d58f81caf7f78ef9e61a98ec67f2841fbf95578876b0675d20ab105120","first_seen":"2026-07-02T06:56:19.111425Z","last_seen":"2026-07-12T23:02:15.67547Z","times_seen":8,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260627-1/68c829affb5bed4c885454402d70cfdb.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.192Z","timestamp":1783393472192,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260627-1/68c829affb5bed4c885454402d70cfdb.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b.hbz8v.com/index.php?cs=06fe250b1dd3e0942b09eef448ebe7bc","fqdn":"b.hbz8v.com","domain":"hbz8v.com","tld":"com"},"ip":{"addr":"3.9.176.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.937Z","timestamp":1783393472937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hbz8v.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 12:15:54 GMT","end":"Thu, 01 Oct 2026 12:15:53 GMT"},"fingerprint":{"sha1":"28:EC:A9:2C:EC:90:28:6F:41:82:9C:F9:D3:98:0F:7E:5F:20:0C:13","sha256":"E0:57:74:FF:6A:2A:3E:94:51:1F:5D:FB:44:CC:BD:7E:19:C7:BC:D3:50:F1:8E:C3:13:A5:39:9E:D8:6C:8A:CA"}}},"request":{"raw":"POST /index.php?cs=06fe250b1dd3e0942b09eef448ebe7bc HTTP/1.1\r\nHost: b.hbz8v.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 162\r\nOrigin: https://jxqc99.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":162,"data":"vhref=https%3A%2F%2Fjxqc99.com%2F\u0026juh=67a54bb24150a8744b9a6a0fe05745b4\u0026cs=06fe250b1dd3e0942b09eef448ebe7bc\u0026ex=1783394072877\u0026v=770f3cb4\u0026pi=false\u0026iif=0\u0026t=1783393472"}},"response":{"raw":"HTTP/2 200 \r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\ndate: Tue, 07 Jul 2026 03:04:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2,"size_decoded":381,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-17T08:39:34.650098Z","times_seen":741790,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":24,"send":0,"wait":26,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/b//5/1049cb002745i?_=1783393472719","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:33.959Z","timestamp":1783393473959,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.czguii.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Sat, 02 May 2026 10:10:14 GMT","end":"Mon, 16 Nov 2026 10:10:14 GMT"},"fingerprint":{"sha1":"90:81:78:94:B4:5E:5E:91:01:35:A7:C7:DD:47:02:96:1D:7D:3A:B3","sha256":"38:D8:49:65:34:B1:30:02:16:06:12:CA:4E:85:0D:0B:DB:3C:1B:CE:CA:95:D3:76:8A:45:44:6A:04:CA:3D:B0"}}},"request":{"raw":"GET /b//5/1049cb002745i?_=1783393472719 HTTP/1.1\r\nHost: czguii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:34 GMT\r\nContent-Type: application/octet-stream\r\nLast-Modified: Tue, 07 Jul 2026 02:45:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c6833-1510f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86287,"size_decoded":12018,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4d73a0cc7a28be1aca9c5d6a6bcde675","sha1":"ae79c54dc2e8fce941ffa7565e27498e5658e2a1","sha256":"900da85efa6cb88f4d1f6814687923dfbc9bfe7f9f33db9a48be99f3e1e1aa48","sha512":"eb4ade0f6d56b98d3650f27132f93638c62edd7f72919438befc8c6e5f70b28a2b3e2720f9909aa39463869b79ed435f8299c3c6558dc3fa028e2963f0b1d993","ssdeep":"1536:p/0M/UBWJ8VKzl2dxi8Qoal6QkVVFllR1I5sCFya37oiHWS8sj+tFhIOMohyJN5p:z14Rayq","tlshash":"3e831fd4a29ae15f2b8c4d43fe78aede50b5972791c5b347c398fa4d04ad24bc29c8c4","first_seen":"2026-07-07T03:05:14.955212Z","last_seen":"2026-07-07T03:05:14.955212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.hbz8v.com/b8mp2e.js?sid=2730i?_=1783393472718","fqdn":"b.hbz8v.com","domain":"hbz8v.com","tld":"com"},"ip":{"addr":"3.9.176.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.748Z","timestamp":1783393472748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hbz8v.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 12:15:54 GMT","end":"Thu, 01 Oct 2026 12:15:53 GMT"},"fingerprint":{"sha1":"28:EC:A9:2C:EC:90:28:6F:41:82:9C:F9:D3:98:0F:7E:5F:20:0C:13","sha256":"E0:57:74:FF:6A:2A:3E:94:51:1F:5D:FB:44:CC:BD:7E:19:C7:BC:D3:50:F1:8E:C3:13:A5:39:9E:D8:6C:8A:CA"}}},"request":{"raw":"GET /b8mp2e.js?sid=2730i?_=1783393472718 HTTP/1.1\r\nHost: b.hbz8v.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\ncache-control: no-store\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2010\r\netag: W/\"7da-USVIyS+9o0vEK6xicYqcHhbgERA\"\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2010,"size_decoded":2400,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"faca3fb38cdb819fd25e3c94d292834e","sha1":"512548c92fbda34bc42bac62718a9c1e16e01110","sha256":"efd91607f210ebc1be6cd5e06b572f7d57e3ba832b98223ea4341464b9c1bc37","sha512":"f39bdc3c6f79ff6a82b045e26bbb5e46972e661570ac03f147ed75bda1660b8e0e5689d4e9569f7667a73f869ad3f962453691958c846b9012f3d5a4d813bfe9","ssdeep":"","tlshash":"6141738b30f3a0a1a1f321794eaf541cf1f76813154ee4e195550b892fa8a3d02afe88","first_seen":"2026-07-07T03:05:14.956195Z","last_seen":"2026-07-07T03:05:14.956195Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":37,"connect":22,"send":0,"wait":25,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260625-1/d4acd8d737b37cd2deed78a86c10649a.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.787Z","timestamp":1783393472787,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260625-1/d4acd8d737b37cd2deed78a86c10649a.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/b//10/105c5c242730i?_=1783393472718","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:33.996Z","timestamp":1783393473996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.czguii.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Sat, 02 May 2026 10:10:14 GMT","end":"Mon, 16 Nov 2026 10:10:14 GMT"},"fingerprint":{"sha1":"90:81:78:94:B4:5E:5E:91:01:35:A7:C7:DD:47:02:96:1D:7D:3A:B3","sha256":"38:D8:49:65:34:B1:30:02:16:06:12:CA:4E:85:0D:0B:DB:3C:1B:CE:CA:95:D3:76:8A:45:44:6A:04:CA:3D:B0"}}},"request":{"raw":"GET /b//10/105c5c242730i?_=1783393472718 HTTP/1.1\r\nHost: czguii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:34 GMT\r\nContent-Type: application/octet-stream\r\nLast-Modified: Tue, 07 Jul 2026 02:45:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c6834-15a7f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88703,"size_decoded":12193,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2f5e1152e8bc4a5279519fbb1ff6e7a4","sha1":"3e7bb0330cf519bbcec1ae03d246a86e6b0244e8","sha256":"b521177572d36d2d97a192b7bca438641d960d864e5a8410b7537f28f8c3c890","sha512":"57f09d663f61e0c4ad459df5f30088eeed88f9a23a8d84e1368c33213c694dce236a0b1857589a85ed2b8a2335d7680220a6a423ffd5181bfd67af7b71d71f9c","ssdeep":"1536:Z/0M/UBWJjVKk82+xevE6CKQ51O6xVVFllR115sCAHb3fjXGOz5jRlRtsjZVA97L:NE6Qv/8vH7","tlshash":"e9831fd8a29ad15f2b8c4d43ee78aede50b5973791c5b347c398fa4d04ad24bc29c8c4","first_seen":"2026-07-07T03:05:14.957014Z","last_seen":"2026-07-07T03:05:14.957014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kh3aq.cc/b//10/105c5c242730i?_=1783393472717","fqdn":"kh3aq.cc","domain":"kh3aq.cc","tld":"cc"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:35.216Z","timestamp":1783393475216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kh3aq.cc","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:67:68:49:99:2D:20:C2:47:7C:73:E5:DC:6E:65:A0:03:92:28:B5","sha256":"4B:1E:A6:40:95:33:12:06:5F:6F:F9:50:53:85:15:23:2E:CD:E1:B4:2A:2B:B1:C8:30:4A:72:E6:2B:C1:7B:CF"}}},"request":{"raw":"GET /b//10/105c5c242730i?_=1783393472717 HTTP/1.1\r\nHost: kh3aq.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:35 GMT\r\nContent-Type: application/octet-stream\r\nLast-Modified: Tue, 07 Jul 2026 02:45:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c6834-15a7f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":88703,"size_decoded":12193,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2f5e1152e8bc4a5279519fbb1ff6e7a4","sha1":"3e7bb0330cf519bbcec1ae03d246a86e6b0244e8","sha256":"b521177572d36d2d97a192b7bca438641d960d864e5a8410b7537f28f8c3c890","sha512":"57f09d663f61e0c4ad459df5f30088eeed88f9a23a8d84e1368c33213c694dce236a0b1857589a85ed2b8a2335d7680220a6a423ffd5181bfd67af7b71d71f9c","ssdeep":"1536:Z/0M/UBWJjVKk82+xevE6CKQ51O6xVVFllR115sCAHb3fjXGOz5jRlRtsjZVA97L:NE6Qv/8vH7","tlshash":"e9831fd8a29ad15f2b8c4d43ee78aede50b5973791c5b347c398fa4d04ad24bc29c8c4","first_seen":"2026-07-07T03:05:14.957014Z","last_seen":"2026-07-07T03:05:14.957014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/template/quan/static/css/common.css","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:31.938Z","timestamp":1783393471938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dczjzx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:07:28 GMT","end":"Tue, 29 Sep 2026 17:07:27 GMT"},"fingerprint":{"sha1":"BD:9D:58:CF:9A:63:DF:4A:D0:86:1E:42:52:DF:B7:2A:42:2C:6F:B1","sha256":"01:E5:9F:2F:D0:51:D1:55:4E:D0:6A:07:7A:AA:68:DE:15:4E:96:CB:CE:AC:6A:04:C1:85:DA:AA:A8:22:F4:4C"}}},"request":{"raw":"GET /template/quan/static/css/common.css HTTP/1.1\r\nHost: jxqc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jxqc99.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 12:41:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3bd08b-5df\"\r\nexpires: Tue, 07 Jul 2026 15:04:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1503,"size_decoded":1266,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"98a76dcc518fa2d67c0bba8886b88e6d","sha1":"9d4e3341ad76a63bf5cd96ebc7578e06d08a08da","sha256":"7d04a1f0b3a5e31276cbc2bf1c113f447d0a606eb415768869bc02fd457d93d4","sha512":"5785b808bb91b4f29b9b0e6e14dc4eb6dab0e123cd9defa44be732889f814117b62a139d1d3055556d96994c88960bbaae2d1774ecc90a9071274fb6c5cb3cd7","ssdeep":"","tlshash":"7531fc504f921d08e517c08d6ead566cdb9ec053cf4e8eaa780617a8eaed38414adecd","first_seen":"2025-08-23T06:09:02.611717Z","last_seen":"2026-07-16T06:56:18.747323Z","times_seen":105,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/template/quan/static/css/index.css","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:31.941Z","timestamp":1783393471941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dczjzx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:07:28 GMT","end":"Tue, 29 Sep 2026 17:07:27 GMT"},"fingerprint":{"sha1":"BD:9D:58:CF:9A:63:DF:4A:D0:86:1E:42:52:DF:B7:2A:42:2C:6F:B1","sha256":"01:E5:9F:2F:D0:51:D1:55:4E:D0:6A:07:7A:AA:68:DE:15:4E:96:CB:CE:AC:6A:04:C1:85:DA:AA:A8:22:F4:4C"}}},"request":{"raw":"GET /template/quan/static/css/index.css HTTP/1.1\r\nHost: jxqc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jxqc99.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 12:41:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3bd08b-2b95\"\r\nexpires: Tue, 07 Jul 2026 15:04:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11157,"size_decoded":3461,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"8c341b17fa5e535cbe9557d82d4aff3b","sha1":"0a2256ef69809919776225dca5a4e6d131958ce3","sha256":"2d1648d0784d9ad62fbd16b06cd299d7c1cf7dea4b3a482ef27b64c4350bb94f","sha512":"1f8ec10f551f6380510bbbae4beac6cfdde57c51fe6a4f3f7e9a4882f4dcbc5ef1f88cef393c7e70bcc6d9a5f258a0f87a45330625b5a39e154f25f41aeee8ef","ssdeep":"192:+AsnVEm5kRnyIJAPiqbJdvhV92MniG8rsT4gxrq5UJqQl359i7X8ycNweVtFVpCZ:+AsnVEm5kRnVJAPiqbJdvhV92MniG8rD","tlshash":"043200233d502444f20be5e5ae649fdad22f4492af4f0f66b4a1797c83894d0157facd","first_seen":"2025-08-23T06:09:02.593206Z","last_seen":"2026-07-16T06:56:18.768977Z","times_seen":101,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20231220-1/2f8ff7df5fd8249ce18534fe56f474f4.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"23.140.204.9","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.177Z","timestamp":1783393472177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 21:21:37 GMT","end":"Sat, 29 Aug 2026 21:21:36 GMT"},"fingerprint":{"sha1":"DD:27:20:6E:74:E4:2D:53:57:A3:1E:D7:66:3E:02:12:23:F6:03:39","sha256":"11:4C:06:12:98:54:27:16:1F:41:73:BE:1F:BD:8C:18:B5:2C:56:E1:11:67:22:4B:CC:BD:75:07:10:E6:E6:E6"}}},"request":{"raw":"GET /upload/vod/20231220-1/2f8ff7df5fd8249ce18534fe56f474f4.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18477\r\nlast-modified: Wed, 20 Dec 2023 09:02:47 GMT\r\nvary: Accept-Encoding\r\netag: \"6582adb7-482d\"\r\nexpires: Tue, 28 Jul 2026 04:08:15 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 773777\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18477,"size_decoded":18896,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x224, components 3","md5":"2eb24df29739ab0ee5d824f864f745bd","sha1":"80622170dac686af3bf8a10bf3c742df2d576092","sha256":"f6db3298263edd47c56742a3a238d8d043d0466bd0124fc4a05fd25b62d182ba","sha512":"90ae9bdfa6ddffb73e0c054cf0fa1f5eee49a90158419dc0ecf71d7a3ddaa8ca26bac9cf9f124010eb439377723cd51f6ceccfe3bec1be9ba28df2541ebb2847","ssdeep":"384:Kcm5N0KJtjI5/rmlNU8PX6a+2mYKhL1WkI2bKHSQA83erJchCz3s8b6kua:Dm5yatjI5ToU8Sa5mphFI22HN5ufLdue","tlshash":"0782d09feb65f5d5fb4a8a421a00fd0a9ecc9cc5f6ad8adba1f44134e980e7842215c4","first_seen":"2025-08-23T06:09:02.654817Z","last_seen":"2026-07-16T06:56:18.764222Z","times_seen":80,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":6,"connect":145,"send":0,"wait":295,"receive":9,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260629-1/f4916175cc5aa667d9a9e4a493f4b4b8.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.182Z","timestamp":1783393472182,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260629-1/f4916175cc5aa667d9a9e4a493f4b4b8.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260628-1/dce884d04f36eba0f25eb1864bf0cff6.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.184Z","timestamp":1783393472184,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260628-1/dce884d04f36eba0f25eb1864bf0cff6.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260625-1/d4acd8d737b37cd2deed78a86c10649a.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.195Z","timestamp":1783393472195,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260625-1/d4acd8d737b37cd2deed78a86c10649a.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/template/quan/static/js/home.js","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.119Z","timestamp":1783393472119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dczjzx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:07:28 GMT","end":"Tue, 29 Sep 2026 17:07:27 GMT"},"fingerprint":{"sha1":"BD:9D:58:CF:9A:63:DF:4A:D0:86:1E:42:52:DF:B7:2A:42:2C:6F:B1","sha256":"01:E5:9F:2F:D0:51:D1:55:4E:D0:6A:07:7A:AA:68:DE:15:4E:96:CB:CE:AC:6A:04:C1:85:DA:AA:A8:22:F4:4C"}}},"request":{"raw":"GET /template/quan/static/js/home.js HTTP/1.1\r\nHost: jxqc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jxqc99.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 12:41:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3bd08b-1401\"\r\nexpires: Tue, 07 Jul 2026 15:04:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5121,"size_decoded":2415,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (377)","md5":"de054f2a612f2e874b86726baf35124c","sha1":"9b7641d794f235e21e4aa791254cc6dc9bb8361f","sha256":"82f367d14344d6d44470806475dbe157de205d0c0da95210f89c1d4474500e80","sha512":"90fc3ab553c874c4b5f8bacb7c174b49a772b1c626b2a1218b9a8b6fbd5ca1d6c2577d0c3ec5acc138f179183cb8e9ce5983ba0765d52b3616db020230aa35c7","ssdeep":"96:1ZvxxHQz2qfz2qk5XuZh5oCak0hJV+TGd2qs8JYIpaM4PVmyX:LXmjrZPXaVPkTGdHskYI74Px","tlshash":"45b1739e2ab71b36697b343b779f934839310043080ace017c5ce7842fa4f6598aafd1","first_seen":"2025-08-23T06:09:02.619607Z","last_seen":"2026-07-12T23:02:15.645647Z","times_seen":51,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/template/quan/static/js/swiper-bundle.min.js","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.121Z","timestamp":1783393472121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dczjzx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:07:28 GMT","end":"Tue, 29 Sep 2026 17:07:27 GMT"},"fingerprint":{"sha1":"BD:9D:58:CF:9A:63:DF:4A:D0:86:1E:42:52:DF:B7:2A:42:2C:6F:B1","sha256":"01:E5:9F:2F:D0:51:D1:55:4E:D0:6A:07:7A:AA:68:DE:15:4E:96:CB:CE:AC:6A:04:C1:85:DA:AA:A8:22:F4:4C"}}},"request":{"raw":"GET /template/quan/static/js/swiper-bundle.min.js HTTP/1.1\r\nHost: jxqc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jxqc99.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 12:41:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3bd08b-21f5a\"\r\nexpires: Tue, 07 Jul 2026 15:04:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139098,"size_decoded":39513,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"99ae94d3f211949d9a5ae0f3cd68d495","sha1":"f2cda424e65ebe2d0c41f94e73521f7e4a79fe70","sha256":"d449a5ed585c8edb37060e5279b84eb817406a5ef71d762e7fc785a68bce707b","sha512":"e30fda6976e83ba298d44fdda98c1fab4f6c66733e5c321c5af98785fc6f310faac0af38931816b4d900a9b14d30b61de84600de74a0c534b289ffc3def95532","ssdeep":"3072:sJ24juukIZuD6poy9v8cnWDkwV4y++GocpYgft/Cx1CjV:sJ24iukIZuD6pl9v8cnWDpV4y++GPugn","tlshash":"77d3f8997360b1a552e3268b92a9c611e3b51400b409c4e870bd4c9b697ed9c13ffffe","first_seen":"2023-03-10T11:03:20Z","last_seen":"2026-07-16T06:56:18.817394Z","times_seen":426,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spdf.zbczce.com/b84adb28cdaa7647308a4a6e1a1db3b0.gif","fqdn":"spdf.zbczce.com","domain":"zbczce.com","tld":"com"},"ip":{"addr":"82.29.53.91","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.148Z","timestamp":1783393472148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spdf.zbczce.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 15:55:13 GMT","end":"Sun, 04 Oct 2026 15:55:12 GMT"},"fingerprint":{"sha1":"B5:1A:1A:0B:DF:99:F3:18:71:2A:3B:AE:7E:17:53:58:80:B6:3B:AC","sha256":"4F:82:D0:A0:34:56:BD:2F:01:B3:3A:29:4E:44:AD:80:CC:DC:B9:7E:9A:AA:C1:28:93:D1:AA:49:48:E8:B7:46"}}},"request":{"raw":"GET /b84adb28cdaa7647308a4a6e1a1db3b0.gif HTTP/1.1\r\nHost: spdf.zbczce.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nage: 18\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\ncf-ray: a103fc86c8305382-DEN\r\ncontent-type: image/gif\r\ndate: Tue, 23 Jun 2026 13:54:44 GMT\r\netag: W/\"6a3a8eec-24d22\"\r\nexpires: Thu, 23 Jul 2026 13:54:26 GMT\r\nlast-modified: Tue, 23 Jun 2026 13:54:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9cP9GMxU67xk6DeauQulYgyoLyP6hI9tPwV1QkQo2AbcybTqiMVxz2tRxGZ2TRUvYLqTgUqCZA%2FxL5mIUHsaE1Mm9%2FcjbwQhKV3w3f84Ezn5R9hm0KnoQUVN9PxNPYCTw%3D%3D\"}]}\r\nserver: cloudflare\r\nserver-timing: cfEdge;dur=7,cfOrigin;dur=0\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, disk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150818,"size_decoded":151615,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"7e385a61c7c45d81be3e6096e7af4406","sha1":"14ae146a5f00e3dfd0f2008ef8a2e34f287cb2e9","sha256":"5fb86628da50655b7b84b74f4f2907cc6bc69187f34384a7e86cc74c138a60ea","sha512":"7720f5dd2171d4b244abe83ccd7a5ed7ef611ffba7e648b43dbf2b1cf74972a1513ac55f22764828ac808c299cd4ed0f6b0667a8462a8f633e835ab3b72c4e27","ssdeep":"3072:UUMhUKmGgRM70bMoTVAIcC8vJjhbGKEGeV4B5d3W0t8KSjBo9NKackgxLXOBMW:025kY9TVAIuJdbtEGe6B5x59NPTiXfW","tlshash":"04e3121f1e372cd3f8c81dcd08d09e599c66586daba4f4c387799b0e812923da8473a6","first_seen":"2026-06-25T10:37:57.989928Z","last_seen":"2026-07-07T05:11:18.390249Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1708,"timings":{"blocked":-1,"dns":1166,"connect":135,"send":0,"wait":135,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/dd0610bc52b2df03a0fb729933f044f8.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.152Z","timestamp":1783393472152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/dd0610bc52b2df03a0fb729933f044f8.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b1987-626e7\"\r\nexpires: Wed, 05 Aug 2026 10:41:52 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:57:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 58960\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYFBIU7GMy%2FK9MJubfacLsvxTGM8zej7BzRDXGGYTcTgCNnXHjAyDMBJzQBqULjfo1wBAzfX%2BXwwQKLp1h8eOoOrW04p7m6J3JLdTImJNIkOvLg9wrrFFZ%2BNADT%2B4zM%2BGsQL\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511892a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403175,"size_decoded":383176,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3307, bps=194, compression=LZW, PhotometricInterpretation=CMYK, orientation=upper-left, width=4133], baseline, precision 8, 800x538, components 3","md5":"25a87dbba69ce135335485a738d0d916","sha1":"88fcf1d608d1ca7b630e7e304520b7954a42e326","sha256":"6f5268acd28c2ba292f85230db96c7e9d86c7d6d25268fa45b2d5b9e0158da8f","sha512":"a65e2b0924791bb158d0c1cd56f985f66cfb1424fb23c1ea1587e7879829714505c07ac0c9367a89ca415066dcdd7783b63cfe10633a258dbb81e577e6ac5a9c","ssdeep":"6144:dMCMT02/r76c3DZ58goU2DVmzs+t+a+WSXXWrvbundtMWbuivlpFLihiFWzyJ:4/r7BDD8gZ2DVxa7SXXWryAWSi9pFLMs","tlshash":"258412657f60ca46faf5003148a5d3ca65b6dc982b53e78431ac0dfb2bf16f09e7a940","first_seen":"2026-07-06T15:52:17.420331Z","last_seen":"2026-07-12T04:52:11.809036Z","times_seen":6,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":4,"connect":0,"send":0,"wait":21,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260628-1/6f69b466a958e8a7be34c96c3ebd07cf.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.186Z","timestamp":1783393472186,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260628-1/6f69b466a958e8a7be34c96c3ebd07cf.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260705-1/f8e16e3066e8dc7f7c9fb97bbabc6a64.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.154Z","timestamp":1783393472154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260705-1/f8e16e3066e8dc7f7c9fb97bbabc6a64.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a49db9c-3d247\"\r\nexpires: Tue, 04 Aug 2026 17:16:59 GMT\r\nlast-modified: Sun, 05 Jul 2026 04:20:44 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 121652\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LIyLBGxnj8s0fVjsIHA6VgRlqc%2B9g%2F377xqPg5gABQvODv6EHniOLega8glGnDLSJlWeK%2BqicfLkmP2OP8TDByBP6JqtJCE%2B%2BycQZ3%2BRRs%2FjgwUAdLW055ShhC9Em%2BJBzyZ\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511894a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250439,"size_decoded":250916,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"67226155ebe654ac25eccfdd601ebba4","sha1":"48c979ad27f548d67572333c881c6f0ae5a52f80","sha256":"415c65da3f594d78a79582b7e7a9dd8cc8b9a31a93e8418cfecf95f5b244baf7","sha512":"78d706f7ddd4e991d855d83c7492df9ffd9b67ff26fa1e26506170668d5115738d929450dbaa4c8a051077ed3e0ec73dd2db6d65c9cbadaa8b403903fd4124bc","ssdeep":"3072:TooH+byPMnPlgQKJj0hOmW/ofEAS+H36e0T0XQdVdGjrwZBPIuYmWvcWdeg5NeQD:EW4epJj0G6mBrbXInvZeguo8KjnxwOP","tlshash":"403423bebbb72e29748b05846869376e039187c47bcb79623e200211ad34c6b957f3d4","first_seen":"2026-07-06T01:59:00.555751Z","last_seen":"2026-07-07T03:05:14.962498Z","times_seen":5,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260705-1/e34c787cbbf572b213bcc8e59e218948.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.159Z","timestamp":1783393472159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260705-1/e34c787cbbf572b213bcc8e59e218948.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a49dce4-2549b\"\r\nexpires: Tue, 04 Aug 2026 05:15:24 GMT\r\nlast-modified: Sun, 05 Jul 2026 04:26:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 164947\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=we5B5DvEdEaxldjG9%2FiCDGv68uLO5XNjqlKIgKtnVMWVU0H4dQPZhhJQQdtAcN1V%2B%2FVYzxIW6ai3c0vrk0x7N%2B9J4%2Bv%2FOi1ZnlJJgA7qk3HrXge3zte996alNOz8F3pxSEsV\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511896a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152731,"size_decoded":153073,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x538, components 3","md5":"6559772a8e14681fc0fceb0f2e6b457d","sha1":"45103215fbc4684bd08ac99dac58f3decc647f2d","sha256":"54147a080949a2767ca7c8e8add94b334c1bc94c77a1a78168b763211f454eb2","sha512":"918118b694bb4cd1cced9dab1914d772f23bda1c70c5c6b88e4ed8b039c9931f5912014daa5e7fc3ae8cb152e2e76118e6fe51a3e1d41ba6d4a273148f5b9ca9","ssdeep":"3072:SAF5G92xlBhk5TDb9UX7U8XkoImHM+lKtGeHjswH3zvym:SAbs2FmllULU8XAms+KceHjsw2m","tlshash":"54e3123013ce51fbe0f7177211a9f8a544d069eebece163182503e768f169c8fa6895a","first_seen":"2026-07-03T07:53:16.189214Z","last_seen":"2026-07-07T05:11:18.444771Z","times_seen":7,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg5.com:3519/upload/vod/20260706-1/03129a5622b6b46b4b7843227edba7bc.jpg","fqdn":"sbzytpimg5.com","domain":"sbzytpimg5.com","tld":"com"},"ip":{"addr":"23.140.204.9","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.217Z","timestamp":1783393472217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 21:21:37 GMT","end":"Sat, 29 Aug 2026 21:21:36 GMT"},"fingerprint":{"sha1":"DD:27:20:6E:74:E4:2D:53:57:A3:1E:D7:66:3E:02:12:23:F6:03:39","sha256":"11:4C:06:12:98:54:27:16:1F:41:73:BE:1F:BD:8C:18:B5:2C:56:E1:11:67:22:4B:CC:BD:75:07:10:E6:E6:E6"}}},"request":{"raw":"GET /upload/vod/20260706-1/03129a5622b6b46b4b7843227edba7bc.jpg HTTP/1.1\r\nHost: sbzytpimg5.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 03:04:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116552\r\nlast-modified: Mon, 06 Jul 2026 02:59:03 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4b19f7-1c748\"\r\nexpires: Wed, 05 Aug 2026 03:12:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 85926\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":116552,"size_decoded":116972,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 800x538, components 3","md5":"e2284e2a891aec34f0ce8a352b1c993b","sha1":"0749ee3812dfd0aea64278452328f45187c0cb24","sha256":"ac5adc81ed04ab4af12a48e1650fddcbf30b5ea34a50850991edb554d5f9c805","sha512":"10a54de5266b843e7ec678501fc744937bdc6583b1640d1c99eb7f2e95fc06d5a432ee69e7976512fc75243c5781d74a22ce7192abc402de46b68f88d827fd4f","ssdeep":"3072:ZosXyoUyugq0+O8x3iOdM7v/tM7SF8B3gp:m5oUdtOT7v/twSF4U","tlshash":"aeb312eae3e4dba1384ec21b11c93e5ea58743a47d18d2fe06bc06965c729f2035bdc1","first_seen":"2026-07-06T15:52:17.442027Z","last_seen":"2026-07-12T17:59:53.402573Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":331,"connect":155,"send":0,"wait":175,"receive":166,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node95.aizhantj.com:21233/tjjs/?k=jjcwg5mffby","fqdn":"node95.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.762Z","timestamp":1783393472762,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tjjs/?k=jjcwg5mffby HTTP/1.1\r\nHost: node95.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260627-1/750c41ad5bb24ec6d038585bf3624e46.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.782Z","timestamp":1783393472782,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260627-1/750c41ad5bb24ec6d038585bf3624e46.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fm.sl25914.com/upload/vod/20241101-1/7484739d8f8b9f419b9e1db6a16ebe97.jpg","fqdn":"fm.sl25914.com","domain":"sl25914.com","tld":"com"},"ip":{"addr":"172.67.205.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.169Z","timestamp":1783393472169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl25914.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 15:59:39 GMT","end":"Fri, 07 Aug 2026 16:57:20 GMT"},"fingerprint":{"sha1":"68:87:8C:7B:DE:D3:1A:11:17:DB:3E:45:E4:91:14:28:26:52:D3:97","sha256":"D8:6A:F2:7B:42:5B:E3:8D:3D:09:D3:B8:A9:9F:EA:C6:13:B4:02:06:5F:8D:63:83:32:B1:2E:63:0A:35:27:50"}}},"request":{"raw":"GET /upload/vod/20241101-1/7484739d8f8b9f419b9e1db6a16ebe97.jpg HTTP/1.1\r\nHost: fm.sl25914.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6728f8bd-1ef7\"\r\nexpires: Mon, 03 Aug 2026 03:12:39 GMT\r\nlast-modified: Mon, 04 Nov 2024 16:39:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 258713\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ym18iJ23%2Bm1HZJQ0tERCwaKwjDM9vRuEgIrKSgJ8apFrdoBj43m2MdGCudsa13UCuEfj%2BiB2J0MdbEJYEXPjA2VD7wJcrbdGGkB%2BzW7Brx7QiMRiY9kE5t8Eg%2BkLSalug%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f513bceb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7927,"size_decoded":8738,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Lavc57.89.100\", baseline, precision 8, 240x320, components 3","md5":"67a69635b2702cb8c92bb32f863fe1fc","sha1":"6c1e055fe6e4456965ae14eb58e497ab1de120db","sha256":"06cee715f217a74ceecc672e340ddbbff209bed541febf7e915d7fed26600043","sha512":"57ab268ec135e91fc51cfb2f6a809ab96e15add185e77c36e5eeae6663599300b136ffc638796ff3e1e12cdacc06ba0e487a95e21f576a4153cca9ec8eebac29","ssdeep":"192:H+6HmdVozsJFsK1SW+VorU8iMhdsrxZSALSpRwxtLE64qC:HBm/liWgCwOdsdIASpR6e","tlshash":"67f19f929b4b1693def0ff7a0639b47cc6bdee515af6a3a398487921c46aa470054302","first_seen":"2026-07-02T06:56:19.114561Z","last_seen":"2026-07-12T23:02:15.684375Z","times_seen":8,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/36e3862ea6eb08c7f88803d65de5f1c8.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.197Z","timestamp":1783393472197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/36e3862ea6eb08c7f88803d65de5f1c8.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b1928-3054f\"\r\nexpires: Wed, 05 Aug 2026 04:53:25 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:55:36 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79866\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ciu3KgSnaUs9x2%2F7%2BrbqAKtvjD2zGN3wZY354n0H3LMYoLZjFw%2FZkEvWGyOawAWp60Sk4yvFHTURX7hl8keUkufbx1koBSj3GBkwV4bKtBPo058j0OtoPvt6H%2FsGZ6T2kgCb\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f51489ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197967,"size_decoded":198341,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x538, components 3","md5":"752c2ce414aac35e940f8623c82525ba","sha1":"fbb79b196541bd9d6187d30b5b89af8bd4ba8b27","sha256":"de9e964b45cf608ab06af190326bf8abcc978c602105a111fd85a1f3d294338d","sha512":"d1d5c6fd84c2261ec0efe383d7829f4745889db4315d63caa5dc696a0a0488a5d672d86873c45b437683d4dc586c2f7c2963dac84111b5800e53f55391ca52ec","ssdeep":"6144:mVg6b/fxYxF7uE0qqRFd8JWo40r/s6Gqd/AMNQHZ:mVvxYvuE1OFGWA5Gqd/6","tlshash":"8814230e63d25feb443b932be5355176b0b0ae023281a1fea77d6584d8d77433a87748","first_seen":"2026-07-06T10:15:15.786023Z","last_seen":"2026-07-07T03:05:14.966015Z","times_seen":4,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/79c8847ff2fcd3cd514bff48bb39b5ad.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.204Z","timestamp":1783393472204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/79c8847ff2fcd3cd514bff48bb39b5ad.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b19ad-21c76\"\r\nexpires: Wed, 05 Aug 2026 04:53:24 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:57:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79867\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XiCQeyXIuH6%2BloC81ITdGVQa9iH6ZDHUdMxh%2B0a%2FFpj1zk5vYjpNvAxCUdRjFfsNIdFdN1ml6PqmWixpES0SqeF2v3l%2FtTPzsa%2B%2Fzj%2BGUochwYyGy0XblbyfwDShF1Ynt9E%2B\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f51489fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138358,"size_decoded":138953,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 800x537, components 3","md5":"23730adb48c9341c00b34cedc8d67a3a","sha1":"6b97c3010f2e52baa429c312cb104143f89ee815","sha256":"cbc73eef4196a2eff97d546ea29e109414ef466a3b8ec67864b565a2ce9267ee","sha512":"3019801080bf02660f65f23a1740f62a42b20c3f9cd5b68e546311f0bc8b4f82ff06cc1f57d70c123acb588828f4696a388382adc7951ad9e9345baa98f61f63","ssdeep":"3072:1x/VgAW4bRSWDXE7eRGzOlR3XUbyA/qmtMf5oZ9CvCvi:1HFZLRbl1XURqmtg5oT96","tlshash":"4fd3122dde413da5ae95ed6c2c83c4530461e768bbb88c9dc619a07e37c4f3e9419e8c","first_seen":"2025-09-30T05:10:41.411489Z","last_seen":"2026-07-07T03:05:14.96688Z","times_seen":9,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/381126565051de0e99229fe4053ea8d3.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.206Z","timestamp":1783393472206,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/381126565051de0e99229fe4053ea8d3.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b18c1-21056\"\r\nexpires: Wed, 05 Aug 2026 04:53:09 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:53:53 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79882\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebym0WDh1GpoLuWuAfdVllN%2F2%2BPMRYkuWv%2FJBqJbkWR6IvIQ0TwchDv2hVSFwdokAX9z8PrpHllCd99CT0LImyP2fTWgd8tXkJxo5VeCQBId32gpFbXeDwDjuuHcZT2oGWQb\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f5158a0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135254,"size_decoded":135904,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 800x538, components 3","md5":"eef6c96717ad7b8b48ce03ed45234386","sha1":"5c754925f018052483deda348023e016618b9ce3","sha256":"60e29096291d05462f551abc09221959a88c1c20577fedadfe37d92879c6abba","sha512":"8925a64d22c0d306e4fadc62fc7964c385e8f685b1349dc9b7bb13a21b1150728108e67248f3b3d723b978218145be94a6e28c1a8f42d8f697c3354134d58fda","ssdeep":"3072:5uxsMi/QpeuRsPS1odqMMOabCKt9aKKMyGfuAa2Zjjp6QZmVPEAaSs4:LEtsq1oCOabntAKKqGA/DrMVsAT/","tlshash":"70d31370f759ccd37adeef3c2a6c0c1638fd2495a592e61ca3b04ad8665c1a894cd8d3","first_seen":"2026-07-06T15:52:17.409163Z","last_seen":"2026-07-07T03:05:14.968054Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fm.sl25914.com/upload/vod/20250706-1/c279f13c3d19fc6d622a7c975bca5b5c.jpg","fqdn":"fm.sl25914.com","domain":"sl25914.com","tld":"com"},"ip":{"addr":"172.67.205.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.174Z","timestamp":1783393472174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl25914.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 15:59:39 GMT","end":"Fri, 07 Aug 2026 16:57:20 GMT"},"fingerprint":{"sha1":"68:87:8C:7B:DE:D3:1A:11:17:DB:3E:45:E4:91:14:28:26:52:D3:97","sha256":"D8:6A:F2:7B:42:5B:E3:8D:3D:09:D3:B8:A9:9F:EA:C6:13:B4:02:06:5F:8D:63:83:32:B1:2E:63:0A:35:27:50"}}},"request":{"raw":"GET /upload/vod/20250706-1/c279f13c3d19fc6d622a7c975bca5b5c.jpg HTTP/1.1\r\nHost: fm.sl25914.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"688ceaa1-27ca\"\r\nexpires: Thu, 30 Jul 2026 16:25:37 GMT\r\nlast-modified: Fri, 01 Aug 2025 16:26:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 556734\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvX7BY7mCK%2BEeh1g3KSCKpixEXO9yHP0Czg7HdKdhjsjDXvn6MsZoCiENtsyoxaT08dXBFTMMmexZohgYxFxNhf3aLHF7C03XolG654OCs7p1BujSVHUu1A%2FbvA8JTYMxw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f513bd0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10186,"size_decoded":10961,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 400x225, components 3","md5":"56b6256379b66a3012a289b158685c98","sha1":"975f084481c4a37b94076514f86e1f8f547ca7bf","sha256":"e20749359968713d8735ad525779ca879df87b2fb3346b0f98556b301e1b93f3","sha512":"4b8551869c3b27c2a3e9b08b2b7a897b4056c0d19f4fa39e406f9e814faf10daceb0217959d6da1e9dd78e19338957f69fed946aed6ea436e6fc27662ce3d8bf","ssdeep":"192:GQFV6RnaV89Hi+90O4T0ez+EBg+jGXIdyXyRPW1bxr36adMj/ki:GkV0nagCs03TL7C+jGXIdVRiNqaYki","tlshash":"1522cf09eb31cca9eb1694629ff67efbd17531102e29497048e903bb30b6db3587174a","first_seen":"2026-07-02T06:56:19.077237Z","last_seen":"2026-07-07T03:05:14.969156Z","times_seen":7,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/eb62919e1f62cc55bc95ddce0690d004.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.200Z","timestamp":1783393472200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/eb62919e1f62cc55bc95ddce0690d004.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b19c9-2435a\"\r\nexpires: Wed, 05 Aug 2026 04:53:09 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:58:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79882\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZX%2BrGEiHqFgyjZP22NHLzMfSuZ6hljbu3Z8Lh6ymMLv5cEeGuEIjcoMUaYwlxC5uqZ%2B%2Bez33xksUX%2B5anPaSr65AxUABAaByV6yYEhCR6myiQ5BAk8%2FhUtkPkCyzCv4ITPm\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f51489da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148314,"size_decoded":148302,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 800x536, components 3","md5":"97de631d3ec1e2c0e815d74b2d7e674b","sha1":"cef916574747db283b19a1d38f452bd1baf47f31","sha256":"2ad28d8def36c2838b3de2caf61e9e64d7384a216d6e530ea74e2ce15f0df902","sha512":"242156642c7cc3cd9a2809c793b3342598543d9f072d1cd03adf35fb45e292b1933076b609752d93bad75ace166dd2194491d4e7d2722ddfe76fee989e87f6b0","ssdeep":"3072:PdcgootEqOQnnPUCkFASx8TF0BVu66lK/+Ln5wOXuPPTKup:6Gnn8/Ae4FSVu6p/IXuH1","tlshash":"bae3126d7692eb85aa78b83326d517925264cf59b8004bda4cc5bf8cf63e21d9f0702c","first_seen":"2026-07-06T15:52:17.426696Z","last_seen":"2026-07-12T04:52:11.83524Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/d04532fde31fd383c54b607584473229.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.202Z","timestamp":1783393472202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/d04532fde31fd383c54b607584473229.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b19c1-1af6f\"\r\nexpires: Wed, 05 Aug 2026 04:53:24 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:58:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79867\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9bUjQCFayyoW%2BgQC6KXxT7k6MSUggCFQxk1sRaXM6MXiW4CX%2FqJWp%2B2qzj10WYlBf%2FfQb1fVIPMlVj4dPVGJJcm4tdUgSIJSNtx0Ryz1DQN0T7QWyc2ruI4f%2FqgQJHo%2FWxG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1739f51489ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110447,"size_decoded":111055,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 800x538, components 3","md5":"a33da42e0be607a51beab3677b1c9946","sha1":"28f881ab5e43ab338380e0a3425adc06b7ee534f","sha256":"5ef2bd97f89760156f4cf75bca06cf45dee49a680d6f95ca8238dd5b94a708c1","sha512":"5b24c5f427f6f71849ce681addeac5ef05f94f09c009db4418069fa2954e1110610a4cc05ca2f5bb0a55fd605e6e2333049dc60d584b41abd030f8c92f24bc3e","ssdeep":"3072:1LKSkH9sWhtE2/59MfQ7cozHhg4wUOoq6XOmeIUH:Rg9sWr/xhBjpI9meII","tlshash":"e6b31203348a515ac6f4fa7aabbca2777da21400a5e0e28aefb1d65dd35f15187008a3","first_seen":"2026-07-01T23:17:12.902468Z","last_seen":"2026-07-07T03:05:14.970363Z","times_seen":4,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/10/105c5c242730i?_=1783393472718","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.745Z","timestamp":1783393472745,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.czguii.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Sat, 02 May 2026 10:10:14 GMT","end":"Mon, 16 Nov 2026 10:10:14 GMT"},"fingerprint":{"sha1":"90:81:78:94:B4:5E:5E:91:01:35:A7:C7:DD:47:02:96:1D:7D:3A:B3","sha256":"38:D8:49:65:34:B1:30:02:16:06:12:CA:4E:85:0D:0B:DB:3C:1B:CE:CA:95:D3:76:8A:45:44:6A:04:CA:3D:B0"}}},"request":{"raw":"GET /10/105c5c242730i?_=1783393472718 HTTP/1.1\r\nHost: czguii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 154\r\nLocation: https://czguii.com/b//10/105c5c242730i?_=1783393472718\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":1246,"timings":{"blocked":-1,"dns":394,"connect":217,"send":0,"wait":219,"receive":0,"ssl":416},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260704-1/df280f4c913103ed1d02e76d8b4eb6c8.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.163Z","timestamp":1783393472163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260704-1/df280f4c913103ed1d02e76d8b4eb6c8.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4891a0-338b7\"\r\nexpires: Mon, 03 Aug 2026 06:14:23 GMT\r\nlast-modified: Sat, 04 Jul 2026 04:52:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 247808\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IE%2FZilGyfOYhy5VUYLC9kExZtT5CPF%2BtkLVDHUQYyyTTCe5K9I07NDniOzN3240n%2F7VAHCwqvGwmFcz9pt6US1REhwDLwKPUAyyyF9Yf9et3Owcyzc%2BkKnwUbs%2BOJexaqcLi\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511898a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211127,"size_decoded":211545,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"6b59cf850798abfebbc6ce206ac2e401","sha1":"3abf4fb1afb905a7d33429c5f9d0d05a531bc3f3","sha256":"3c984d9331babcb52029d434a38f9e52b1740f9bf0debca31fa2e7eb2f9432ff","sha512":"47e4d0364ce338ec86e90aea891ac9bde398d53bd14ddaca288f0448b472e17865fc8a78bd203c7c1a5aa894535437f55ad8ffd01646e037fd88301540c819c4","ssdeep":"3072:R75BVm3K1XBKycpIwmuOys7J7ApPRiC9G3VdtkxiBpDjQh//80ZCjU5WDtfuCFLa:RRCoXJc+URO75FBpcH80ZXWDtfrM","tlshash":"452423f538f7a8bed04a665b26e644fb51789123d8d60ace166c4730f0c28adb7670cd","first_seen":"2026-03-19T06:58:50.871876Z","last_seen":"2026-07-07T03:05:14.971196Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260705-1/eb357759bf1b84fa3fe4750b1753a472.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.156Z","timestamp":1783393472156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260705-1/eb357759bf1b84fa3fe4750b1753a472.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a49db94-2ee0b\"\r\nexpires: Tue, 04 Aug 2026 17:16:59 GMT\r\nlast-modified: Sun, 05 Jul 2026 04:20:36 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 121652\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9Wg9G9efka43ecA2yUtX%2BW7RuVSchu9y4eDuXptirvBJB9NQfX5l6mY8RZX5hhQBPxFTg6nCgBrHmHRV6al9hdj0WYhO9XQOW8HzNSfESsxWDlMm7nQwoITtD4gznpIbQWX\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511893a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192011,"size_decoded":192444,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"63950b5ac1314b2f0074dde651dbb8ff","sha1":"17052253b73071acbb69c6ead2b17f230c957ad2","sha256":"1d34dce23ab8470b8db47ebf7ce97f96a92a0a6956ed7ca75ba38bdf7b8716ac","sha512":"04a253106493c7f195d7ddeb69b7c1f9eba94c4573bc92111e9b596508bf2872c6284b312a42903b3dfc98083abc97bcc29f148e73d906b5dee97d0e45fc6280","ssdeep":"3072:ivqchiPrgkbZAbpvkVT8sJSOsUnHAQe0hurOVvNswGfPbGEnSfiGXpvs1qBhWAnj:aqe7kbubp0OJulhurr1fnu5kwWAnZJNd","tlshash":"4914128cea7f7204535647a022d013db3b11bae3990a6bde984a9dd3747c8b807f7589","first_seen":"2026-02-22T20:22:13.796746Z","last_seen":"2026-07-07T03:05:14.971682Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/nhTOIfHE_YYeDZziMXrM9w/c1d54b0f-77ba-4fea-df23-5baf06af0900/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.2.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.141Z","timestamp":1783393472141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 18:15:40 GMT","end":"Sun, 27 Sep 2026 19:15:15 GMT"},"fingerprint":{"sha1":"77:02:9D:14:E3:0A:F3:63:71:8F:43:5D:F2:BE:73:09:C9:58:0E:DA","sha256":"08:A1:3A:5B:0D:CF:AA:91:EC:4F:3F:89:53:D0:80:3C:36:8C:C6:D5:42:2C:55:1C:25:C0:03:61:87:3A:F0:A5"}}},"request":{"raw":"GET /nhTOIfHE_YYeDZziMXrM9w/c1d54b0f-77ba-4fea-df23-5baf06af0900/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29008\r\ncf-ray: a1739f510b11723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2139192\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cf2a5rCQ9vLME_p1g4SlAEx_sofb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ram/- q=0 n=0+0 c=0+0 v=2025.11.6 l=29008\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nwarning: cf-images 299 \"AVIF anim not supported\"\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29008,"size_decoded":29702,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24da998d588c70123d5e4172af74b855","sha1":"12f600731a57094df30e7a4b3f5e077ec4aaa1c5","sha256":"7166d71d8b89a39a32d32a7c9111946e6f8f3fb87c6b4ebec4fa69b1b255f1c7","sha512":"88b786ea2759dbd441fb9191e519d329cf8584d1e90dba4b1e1d9f65b89cef242fd2c8a5a851ff9b5a7fce7f24b74ffb551fc6cf90c6c3b179981f80eec98a77","ssdeep":"768:63/GvLbEbej1mFgRxGoqj5vDIDQN+D84ZZKvV:63/X210gRAoqjdsHyV","tlshash":"98d2e18c1f6c4c15fbf36977c5b03eda860658839a2701a39306389668ca6fc73a4732","first_seen":"2025-06-10T17:55:11.470708Z","last_seen":"2026-07-12T23:02:15.645172Z","times_seen":55,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node91.aizhantj.com:21233/tjjs/?k=y3n5k8rpsl9","fqdn":"node91.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.773Z","timestamp":1783393472773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 27 Jun 2026 16:38:52 GMT","end":"Tue, 12 Jan 2027 16:38:52 GMT"},"fingerprint":{"sha1":"5C:FE:66:59:7E:FD:DB:A5:B6:E4:B8:B0:C6:2C:62:77:77:DF:6D:21","sha256":"8E:DA:CA:F9:7F:3F:B2:15:0F:EA:44:2C:82:F7:1A:84:36:39:19:EC:5C:15:10:E9:DB:E5:BE:F7:BE:37:03:48"}}},"request":{"raw":"GET /tjjs/?k=y3n5k8rpsl9 HTTP/1.1\r\nHost: node91.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nexpires: Tue, 07 Jul 2026 03:36:03 UTC\r\ncontent-encoding: gzip\r\nazp: p03\r\ndate: Tue, 07 Jul 2026 03:04:33 GMT\r\neo-log-uuid: 12606431123349953640\r\neo-cache-status: MISS\r\ncache-control: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35703,"size_decoded":12579,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e051c0bc8bd0b9b85140f676391173b6","sha1":"4af8f21ee35dea56e7d1cd5fcebe5ec7c4b702dc","sha256":"bde372de81154372b9acb45231af14a4899e2a059d71f08a822694ede51a17eb","sha512":"c942429adde488eb7ba3f81c7d334f275950b446d6b3d26e4360439714a5b9bd8439ad9424e90d435ce301f8f153222e83293701c976865fb0750975cd89fbe6","ssdeep":"768:ekS5kuNczE4rDE93/VrWpWdk2pByX5h0N:ZSOyczE4rDE93/Fg+Bk5h2","tlshash":"c8f2e8d632ce2536a2767099d95ff50cf8b9aa1437d9ac44590cc0c46d208ba83ff9bd","first_seen":"2026-07-07T03:05:14.973597Z","last_seen":"2026-07-07T03:05:14.973597Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":612,"connect":21,"send":0,"wait":383,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260629-1/f4916175cc5aa667d9a9e4a493f4b4b8.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.775Z","timestamp":1783393472775,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260629-1/f4916175cc5aa667d9a9e4a493f4b4b8.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260627-1/6a6ccd345c231601de26e4fb572897cb.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.783Z","timestamp":1783393472783,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260627-1/6a6ccd345c231601de26e4fb572897cb.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b.hbz8v.com/index.php?cs=6f0f742711268af117dc11a9f0defda4","fqdn":"b.hbz8v.com","domain":"hbz8v.com","tld":"com"},"ip":{"addr":"3.9.176.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:33.323Z","timestamp":1783393473323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hbz8v.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 12:15:54 GMT","end":"Thu, 01 Oct 2026 12:15:53 GMT"},"fingerprint":{"sha1":"28:EC:A9:2C:EC:90:28:6F:41:82:9C:F9:D3:98:0F:7E:5F:20:0C:13","sha256":"E0:57:74:FF:6A:2A:3E:94:51:1F:5D:FB:44:CC:BD:7E:19:C7:BC:D3:50:F1:8E:C3:13:A5:39:9E:D8:6C:8A:CA"}}},"request":{"raw":"POST /index.php?cs=6f0f742711268af117dc11a9f0defda4 HTTP/1.1\r\nHost: b.hbz8v.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 162\r\nOrigin: https://jxqc99.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":162,"data":"vhref=https%3A%2F%2Fjxqc99.com%2F\u0026juh=67a54bb24150a8744b9a6a0fe05745b4\u0026cs=6f0f742711268af117dc11a9f0defda4\u0026ex=1783394073144\u0026v=bc36d9c0\u0026pi=false\u0026iif=0\u0026t=1783393473"}},"response":{"raw":"HTTP/2 200 \r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\ndate: Tue, 07 Jul 2026 03:04:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2,"size_decoded":381,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-17T08:39:34.650098Z","times_seen":741790,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260704-1/688643789f5a6380c47146f8455e45ef.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.164Z","timestamp":1783393472164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260704-1/688643789f5a6380c47146f8455e45ef.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4891f5-31588\"\r\nexpires: Mon, 03 Aug 2026 10:11:42 GMT\r\nlast-modified: Sat, 04 Jul 2026 04:54:13 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 233569\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2Bmf6mGQix7xsq9FeA3WUz6a2BA3n%2Fdik0wS66AEnv%2FOlGrwxfwiPJVhWzy6hV1B9lKPcEP4ELZvh5b%2Byi%2BCFBI%2FhLWy8zE0AmVaW0FEsdumXCOibbFw1dKQhYyOvA3qNLZJ\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511890a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202120,"size_decoded":202365,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"cb21aa282fe32190e3d4f51ed02c9350","sha1":"bf8206c70bbd66ce870fb32002c6e893abd7a84e","sha256":"1d88437c1ea5f9ab75ae7386f681ddb91421cc1f7753d778bef4d43cf8eb490b","sha512":"479455c4d151d4db94503c04104d5692cb70f961b119f05cedd0fcea4ea9cec1af60856c3559175868e45f004494863db009b604e2d9c6f761ad7e3a598b638d","ssdeep":"3072:X2oHugWepyxviUB1VmYdqqOCKeJ+UkD91jp3lUAvfKZSZ+UBW0NuV4WqYwq7J9RG:X2depGa2ZdMqUplUjZSMUBbuCWLnrCx","tlshash":"ae14233fd3657892ef14252da8a2a18fe5c59ad6f38f680570d470cce75a526b702037","first_seen":"2026-07-06T01:59:00.577578Z","last_seen":"2026-07-07T03:05:14.974545Z","times_seen":5,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa.sl260204.top/upload/vod/20260510-1/c7aaf27aff85bf0b640c09fc496fb7df.jpg","fqdn":"fa.sl260204.top","domain":"sl260204.top","tld":"top"},"ip":{"addr":"172.67.68.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.167Z","timestamp":1783393472167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260204.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 12:32:06 GMT","end":"Mon, 31 Aug 2026 13:32:00 GMT"},"fingerprint":{"sha1":"DF:9E:04:C6:48:12:79:E0:AA:5F:34:09:DB:8A:0F:82:F2:2D:A4:F3","sha256":"B1:65:3A:12:70:0B:9B:44:32:FF:F1:8B:D8:1D:EE:94:35:EB:1B:6D:F6:88:F1:C7:95:A4:9A:86:00:35:A3:02"}}},"request":{"raw":"GET /upload/vod/20260510-1/c7aaf27aff85bf0b640c09fc496fb7df.jpg HTTP/1.1\r\nHost: fa.sl260204.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: \"6a00c316-45cf\"\r\nexpires: Sat, 01 Aug 2026 15:01:40 GMT\r\nlast-modified: Thu, 02 Jul 2026 15:01:53 GMT\r\nserver: cloudflare\r\nx-cache: HIT, policy, disk\r\nserver-timing: cfExtPri\r\nage: 312691\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NQRVwPMKJOC3RvjzHJGiWOuTpg7ecYiEza4MzfjBbmm3naaHvzCgfhdy8lfdZpfxiRib9hxVNgyvc2SaqSBz5NAp3NeM7sPmcBPp3hmuZqdrZpLb6Zohoy7PSF1ud1104A%3D\"}]}\r\ncf-ray: a1739f5189da5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17871\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17871,"size_decoded":18637,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 640x360, components 3","md5":"5f9b06c83f119b7caf3bb24d8594f931","sha1":"48e17959f2c1991be10c1116a8f4df7247bc5f52","sha256":"7c55ea1236d5cdabf2db54f9997bb246feb087fc08875ffceeaf78ac26becc8e","sha512":"cfad28dfad275799e41a54fa5b2623ec1849f8fbdc4fb88229cca97088e1d12ff8200fc99d28067e9e54007a0761e3641e7e0a22b6fb5a8d4a3f3801d02c0cc3","ssdeep":"384:cW/udRIBRHJ/gx7zku+/FWQxFSlwFlC68I29m2rGV9TkHCrOu/KJbtp:cQHJoqu+/FWQxFlF38X9m2SPYJb3","tlshash":"b382e1da230a712d6926ec3064b1c33d32aa21d4f5e1321b7b1c13f499707d7d0d9aad","first_seen":"2026-05-31T14:30:39.59804Z","last_seen":"2026-07-07T03:05:14.975182Z","times_seen":6,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":59,"connect":20,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260627-1/6a6ccd345c231601de26e4fb572897cb.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.190Z","timestamp":1783393472190,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260627-1/6a6ccd345c231601de26e4fb572897cb.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/07ced78c61b780fd23150bd941ea6a0b.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.208Z","timestamp":1783393472208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/07ced78c61b780fd23150bd941ea6a0b.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b18f6-55072\"\r\nexpires: Wed, 05 Aug 2026 04:53:09 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:54:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79882\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlw5hAqT3rugInb3yOCtB6Q4H0RlJaALdsNv6f7%2B5zcNxtGfsfyWcDaUswOKZ1Rr2%2BTYGMb7W958FjT58034ijejIDXFM0Z67lrGdD6Ex4XMxOtaAnupXKjCcCbC9XWoGEkO\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f5158a2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348274,"size_decoded":333254,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3307, bps=194, compression=LZW, PhotometricInterpretation=CMYK, orientation=upper-left, width=4133], baseline, precision 8, 800x538, components 3","md5":"a4d89b0fc7e3e55d8f0cf8e773eeee93","sha1":"d4c4c0a60b7563d9e49dae70b87c69f771063d0c","sha256":"9eaab230d2c62a12b5821ae41281b8ecf79f63f6fafc605dcc4533ee871f44ee","sha512":"6daad1d9731e731db14746040f2913c71eadd69af2fe2001d8c2f5d27224e6058ce9c0e3c9cc2f3916ee2247dcaee8ba10e153a362e37c55be77ea2b56b4b0ba","ssdeep":"6144:5NeNDM609YuStTT56nZOFDG9UtIEkuAyQT7Oe4IFjKgF1/aT7kszSxbAVrJKnZH:o6YuiTSZODJnku6dve84kszAcruZH","tlshash":"dd7423365a099d33e2dc873052a1fa24418ae08d67d26b10f6ac7f5277703a49f777ca","first_seen":"2026-07-06T15:52:17.41356Z","last_seen":"2026-07-07T03:05:14.975696Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"czguii.com/5/1049cb002745i?_=1783393472719","fqdn":"czguii.com","domain":"czguii.com","tld":"com"},"ip":{"addr":"47.116.14.146","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.757Z","timestamp":1783393472757,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.czguii.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Sat, 02 May 2026 10:10:14 GMT","end":"Mon, 16 Nov 2026 10:10:14 GMT"},"fingerprint":{"sha1":"90:81:78:94:B4:5E:5E:91:01:35:A7:C7:DD:47:02:96:1D:7D:3A:B3","sha256":"38:D8:49:65:34:B1:30:02:16:06:12:CA:4E:85:0D:0B:DB:3C:1B:CE:CA:95:D3:76:8A:45:44:6A:04:CA:3D:B0"}}},"request":{"raw":"GET /5/1049cb002745i?_=1783393472719 HTTP/1.1\r\nHost: czguii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 154\r\nLocation: https://czguii.com/b//5/1049cb002745i?_=1783393472719\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":1190,"timings":{"blocked":-1,"dns":382,"connect":198,"send":0,"wait":200,"receive":0,"ssl":410},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.hbz8v.com/b8mp2e.js?sid=2745i?_=1783393472719","fqdn":"b.hbz8v.com","domain":"hbz8v.com","tld":"com"},"ip":{"addr":"3.9.176.51","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.759Z","timestamp":1783393472759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hbz8v.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 12:15:54 GMT","end":"Thu, 01 Oct 2026 12:15:53 GMT"},"fingerprint":{"sha1":"28:EC:A9:2C:EC:90:28:6F:41:82:9C:F9:D3:98:0F:7E:5F:20:0C:13","sha256":"E0:57:74:FF:6A:2A:3E:94:51:1F:5D:FB:44:CC:BD:7E:19:C7:BC:D3:50:F1:8E:C3:13:A5:39:9E:D8:6C:8A:CA"}}},"request":{"raw":"GET /b8mp2e.js?sid=2745i?_=1783393472719 HTTP/1.1\r\nHost: b.hbz8v.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\ncache-control: no-store\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2010\r\netag: W/\"7da-pSnVKEDV6WMePaCCEyxP6B8H39g\"\r\ndate: Tue, 07 Jul 2026 03:04:33 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2010,"size_decoded":2400,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3d56502bf5d9431ed64dcec15e881dd8","sha1":"a529d52840d5e9631e3da082132c4fe81f07dfd8","sha256":"daba173e9e2098d024c4cd388efb1177f40bb7349f74461be68ce0e9e8d26390","sha512":"5d82e88228b398f603d32de3a90cecff5853d065d8e1dbd0840674fbe21a4d0ad58affe4adee8a19beda5070fe46257d5b66fd50b2fdd65c3ca60109f5273a53","ssdeep":"","tlshash":"3e41548f70f3a061a1b71179496f542cf5b76c23114dd4a195540ad92f58a2d42aff88","first_seen":"2026-07-07T03:05:14.976162Z","last_seen":"2026-07-07T03:05:14.976162Z","times_seen":1,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":27,"connect":24,"send":0,"wait":26,"receive":0,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/template/quan/static/css/swiper-bundle.css","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:31.940Z","timestamp":1783393471940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dczjzx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:07:28 GMT","end":"Tue, 29 Sep 2026 17:07:27 GMT"},"fingerprint":{"sha1":"BD:9D:58:CF:9A:63:DF:4A:D0:86:1E:42:52:DF:B7:2A:42:2C:6F:B1","sha256":"01:E5:9F:2F:D0:51:D1:55:4E:D0:6A:07:7A:AA:68:DE:15:4E:96:CB:CE:AC:6A:04:C1:85:DA:AA:A8:22:F4:4C"}}},"request":{"raw":"GET /template/quan/static/css/swiper-bundle.css HTTP/1.1\r\nHost: jxqc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jxqc99.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 12:41:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3bd08b-4926\"\r\nexpires: Tue, 07 Jul 2026 15:04:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18726,"size_decoded":5568,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2094)","md5":"fa78c7b9986732c829f92f4d8b225834","sha1":"b44fe6dadec04be9ea234df9814f938141ab55fe","sha256":"cb7dd4649c46706b6ee94681914c9d28924fee88ac3266234a407da9ce07794c","sha512":"cdedb99b587ee2040ea1d96e022d3d993a656c5c1350373e55859ec5279d7eaed3d3dccd5ce515a2165ba47e63875535879d72224637f9582f025bbbe6f884c6","ssdeep":"192:+NCmUZKnectoOJ4PQ6UpqWaCxYGsOdbG68FWPgFmFFDE4bTswwvlce7se6toXcSv:+hUIecnOPjUpTcGZGAYFmFFE4boxlh","tlshash":"098213985bb01c13271ace7a1a328774ebb854410b4bdd79a2c06c48dff99fc631f2a5","first_seen":"2025-08-23T06:09:02.616237Z","last_seen":"2026-07-16T06:56:18.78017Z","times_seen":105,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260704-1/44df4e80fab9d9feb1761aa0ab446608.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.160Z","timestamp":1783393472160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260704-1/44df4e80fab9d9feb1761aa0ab446608.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a489176-ff71\"\r\nexpires: Mon, 03 Aug 2026 10:11:42 GMT\r\nlast-modified: Sat, 04 Jul 2026 04:52:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 233569\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3C%2BD6OJrwxxB%2FMgN9WnrB8XvGTLef7Z%2Fqys4kjSZpJWSocRhWztOfdwKqEgN1oEovxSjI3orbDaJkY3Iq2W7fTwjUzSYUe4X8EXlJxqBZDewwjh%2Becj8Np3sUrCFOsex3qLG\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511895a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65393,"size_decoded":66032,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"00cb90e0336aa1a8acc0100273d8740a","sha1":"771305af9684621b80f23a1eb242a94627e85ede","sha256":"814622d5de603a3889a97106d75554553cb1e236881a586f6c4fc7ef4cba3c62","sha512":"42b7bc4783d9c8bc020b9b54bfaec9685f579aa2452df6d190925d0eac6974e6f4eb0cafe94f2c3f6fbfccffe550c6e4eb87ed557f29c1ba45679a94a7d991b1","ssdeep":"1536:4mUZTaDDYer8RLXF3jvR5+ubje5ovSof7xSPKbcwlNELtConRIpNUsq:ruT6DvaLpp5lbSavX4SbcwlNKUM","tlshash":"025302192d0f6e28bb7e29cfd18e0d10d2d8e99129e306c6d7b5567d8b07fc63120979","first_seen":"2026-04-04T19:21:02.136384Z","last_seen":"2026-07-07T03:05:14.97765Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kh3aq.cc/5/1049cb002745i?_=1783393472719","fqdn":"kh3aq.cc","domain":"kh3aq.cc","tld":"cc"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.750Z","timestamp":1783393472750,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kh3aq.cc","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:67:68:49:99:2D:20:C2:47:7C:73:E5:DC:6E:65:A0:03:92:28:B5","sha256":"4B:1E:A6:40:95:33:12:06:5F:6F:F9:50:53:85:15:23:2E:CD:E1:B4:2A:2B:B1:C8:30:4A:72:E6:2B:C1:7B:CF"}}},"request":{"raw":"GET /5/1049cb002745i?_=1783393472719 HTTP/1.1\r\nHost: kh3aq.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 154\r\nLocation: https://kh3aq.cc/b//5/1049cb002745i?_=1783393472719\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":1629,"timings":{"blocked":-1,"dns":541,"connect":270,"send":0,"wait":271,"receive":0,"ssl":548},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260628-1/dce884d04f36eba0f25eb1864bf0cff6.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.777Z","timestamp":1783393472777,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260628-1/dce884d04f36eba0f25eb1864bf0cff6.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260628-1/6f69b466a958e8a7be34c96c3ebd07cf.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.778Z","timestamp":1783393472778,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260628-1/6f69b466a958e8a7be34c96c3ebd07cf.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kh3aq.cc/b//5/1049cb002745i?_=1783393472719","fqdn":"kh3aq.cc","domain":"kh3aq.cc","tld":"cc"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:34.391Z","timestamp":1783393474391,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kh3aq.cc","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:67:68:49:99:2D:20:C2:47:7C:73:E5:DC:6E:65:A0:03:92:28:B5","sha256":"4B:1E:A6:40:95:33:12:06:5F:6F:F9:50:53:85:15:23:2E:CD:E1:B4:2A:2B:B1:C8:30:4A:72:E6:2B:C1:7B:CF"}}},"request":{"raw":"GET /b//5/1049cb002745i?_=1783393472719 HTTP/1.1\r\nHost: kh3aq.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:34 GMT\r\nContent-Type: application/octet-stream\r\nLast-Modified: Tue, 07 Jul 2026 02:45:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a4c6833-1510f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86287,"size_decoded":12018,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4d73a0cc7a28be1aca9c5d6a6bcde675","sha1":"ae79c54dc2e8fce941ffa7565e27498e5658e2a1","sha256":"900da85efa6cb88f4d1f6814687923dfbc9bfe7f9f33db9a48be99f3e1e1aa48","sha512":"eb4ade0f6d56b98d3650f27132f93638c62edd7f72919438befc8c6e5f70b28a2b3e2720f9909aa39463869b79ed435f8299c3c6558dc3fa028e2963f0b1d993","ssdeep":"1536:p/0M/UBWJ8VKzl2dxi8Qoal6QkVVFllR1I5sCFya37oiHWS8sj+tFhIOMohyJN5p:z14Rayq","tlshash":"3e831fd4a29ae15f2b8c4d43fe78aede50b5972791c5b347c398fa4d04ad24bc29c8c4","first_seen":"2026-07-07T03:05:14.955212Z","last_seen":"2026-07-07T03:05:14.955212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/26cc154808e11267c9a88afe367fdcf8.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.150Z","timestamp":1783393472150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/26cc154808e11267c9a88afe367fdcf8.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b198c-2246f\"\r\nexpires: Wed, 05 Aug 2026 10:41:52 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:57:16 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 58960\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=44okDWHuafOCaZ0XvAoCRD4dyJ1a%2BvjnzC1uZXpLMvTbBmc394Kz%2BoC%2FZbsXSq7zsN%2B3bIuNjRDOMCdFo15W57DcQnkmT5B%2Brs8PZA%2Fz30wbO0tE0RcHUj0RQ9qg%2Fv6RYyzZ\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f511891a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140399,"size_decoded":141038,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 800x537, components 3","md5":"c8cb8ca664e317c0f9dd6b91839b8a6d","sha1":"824fa722ea85c22b46e2e3782e066428b937950b","sha256":"9d724ede451950b2f4b816d69a9c8687b0ab29154a278d4d3976e32ffc218a00","sha512":"3f3df211c311df2ed0bad846f1e731a81aedd547bd885e073f3e0ca04c20ab476aa519bcbf4eae966c3f37b4cfaabfc7130067b1d57327898efbb6ed63a81714","ssdeep":"3072:ocV0yZ9sYimCRNeccyEmBgqkt7hESGjQ1TKf+TWd8Jhxye:ocV3Z9dINJcCBZSGjuTKvduxye","tlshash":"5dd312f9add25ec425dcac36821870c2a27f52ad1bdd368faf5485a40613fd06e2f14c","first_seen":"2025-10-03T10:01:53.122214Z","last_seen":"2026-07-07T05:11:18.430106Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":7,"connect":12,"send":0,"wait":14,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260626-1/315d786ec4dd7a82803e3130c6f40616.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.166Z","timestamp":1783393472166,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260626-1/315d786ec4dd7a82803e3130c6f40616.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fa.sl260204.top/upload/vod/20260313-1/3d8e8dbe570ef88b562c1df745cea427.jpg","fqdn":"fa.sl260204.top","domain":"sl260204.top","tld":"top"},"ip":{"addr":"172.67.68.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.175Z","timestamp":1783393472175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260204.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 12:32:06 GMT","end":"Mon, 31 Aug 2026 13:32:00 GMT"},"fingerprint":{"sha1":"DF:9E:04:C6:48:12:79:E0:AA:5F:34:09:DB:8A:0F:82:F2:2D:A4:F3","sha256":"B1:65:3A:12:70:0B:9B:44:32:FF:F1:8B:D8:1D:EE:94:35:EB:1B:6D:F6:88:F1:C7:95:A4:9A:86:00:35:A3:02"}}},"request":{"raw":"GET /upload/vod/20260313-1/3d8e8dbe570ef88b562c1df745cea427.jpg HTTP/1.1\r\nHost: fa.sl260204.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"69cd48e4-4f4f\"\r\nexpires: Sun, 02 Aug 2026 12:13:00 GMT\r\nlast-modified: Wed, 01 Apr 2026 16:33:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 312691\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cu9eq3tLLBWplPg6QUOImot4IQqi%2F%2F32QOWLmPeVarzCPA088RgBec%2FTK1isW8erQhKup1cNn7icycd90ujLVE4OFdVU%2FAGpX2jRXf2VqNuNVkPatmfNPCaCx%2B1QUblnXx8%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f5189db5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20303,"size_decoded":21023,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 640x360, components 3","md5":"f26567a568500b899c2e5de81d56f2a5","sha1":"1866113860283f311f1a2b6d4ef168367bca1628","sha256":"4638a861fd74866d66887c1fb7d122b8acfb807f443b192139bdfe95194a7fb4","sha512":"950a96ceda1704a09c680d87742b577e8aecd3360748174526aea8a602668967b41fc2580ff127460ed1cd5a7a84c77098cb2827dec669c6c639dff691c56e67","ssdeep":"384:uEmOMF4326v/w9WlJNxSUBBkNICPRy98DEELFkbVGwL4XlqXd4Yc:cOMF43tv/w9WOKkN/PsSqZgVqXyz","tlshash":"b992cfdbb261fe4698563718d878f7c3894a5cde2311696e04d0cb1ef81a9c8d0cc36a","first_seen":"2026-06-12T15:26:43.367657Z","last_seen":"2026-07-07T03:05:14.979006Z","times_seen":8,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sbzytpimg1.com:3519/upload/vod/20231009-7/5619308943ac46cf6fd5fb570bf130cc.jpg","fqdn":"sbzytpimg1.com","domain":"sbzytpimg1.com","tld":"com"},"ip":{"addr":"23.140.204.9","port":3519,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.179Z","timestamp":1783393472179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lsbzytp.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 21:21:37 GMT","end":"Sat, 29 Aug 2026 21:21:36 GMT"},"fingerprint":{"sha1":"DD:27:20:6E:74:E4:2D:53:57:A3:1E:D7:66:3E:02:12:23:F6:03:39","sha256":"11:4C:06:12:98:54:27:16:1F:41:73:BE:1F:BD:8C:18:B5:2C:56:E1:11:67:22:4B:CC:BD:75:07:10:E6:E6:E6"}}},"request":{"raw":"GET /upload/vod/20231009-7/5619308943ac46cf6fd5fb570bf130cc.jpg HTTP/1.1\r\nHost: sbzytpimg1.com:3519\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34325\r\nlast-modified: Wed, 22 Nov 2023 12:54:06 GMT\r\nvary: Accept-Encoding\r\netag: \"655df9ee-8615\"\r\nexpires: Fri, 24 Apr 2026 14:54:35 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 8942997\r\ncache-status: HIT\r\nserver: HyperCDN\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34325,"size_decoded":34745,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 800x540, components 3","md5":"b58aab727eb3d5055355a0b23e9278df","sha1":"9a0dc34be9e8130e0b788432ac825baad4e3f4f3","sha256":"0de5d5ddc8207077496c0bfcb3d47590c215fc6a291ff23dce2d162fc2ecf68a","sha512":"9ab6e8ff6aad6f451dd1ea7b4734c2fac4c89175325c96de24833c9d45497a2ecc44903a570c7b21c17002dc8cb80de34f5a7ae3f102f2e7d1ef20776f7e1027","ssdeep":"768:G5Yd3fobYYUcCKW/TBodPWRI9Pum7dqHq1u0LALe2veTiDM:G+PzIW/TWBWG9mmMv2TL","tlshash":"07f2d0fb4b889c61ed6687243c1b15ef9f2b4f09d9e773810e665d3fe9c4404a04e9a8","first_seen":"2025-08-23T06:09:02.621891Z","last_seen":"2026-07-16T06:56:18.819645Z","times_seen":80,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":3,"connect":155,"send":0,"wait":341,"receive":92,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/387b7038078b997e8c25362713eba1a8.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.215Z","timestamp":1783393472215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/387b7038078b997e8c25362713eba1a8.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b18fe-20fd7\"\r\nexpires: Wed, 05 Aug 2026 04:53:09 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:54:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79882\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EW9BdOKFc3TjTCerfjedRkH4poMfXVISeMCX4qaCdld91QfU%2BbQnCMn8S5x2xCnIDG7szatNslyx952vomA%2FIMgvPgdUDAcoutQZxlipuFRrwBiFOarBdq5ZnDdJFo9mq%2FV8\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f5158a4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135127,"size_decoded":134597,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 800x537, components 3","md5":"cd87c16ad11cc4fb1d7ee53f87abbc8b","sha1":"865bf3ee5dc223c0651e12671191fa434f98f802","sha256":"9de4a41588ca1f16111c62bfb9b93193327534b4433c5c7c08de18c02c264e2c","sha512":"afe3651159ad65ddf2461d4b1e3f7f162eae0174fe9a03f92fda8d7f2d0309b4170995f6692471de53fb179baf9ff0254c9cc85b9929553461e250a337c99691","ssdeep":"3072:RfoKBmg79a3iPmJP1jdkDeDxD+ksEH40uBMfQxefChcQ/Lg6Vm+:B1qNjuDQxDaEH40yxeg/06Vm+","tlshash":"43d312263e07b671eccad697bf747d246023b4e82b2856bc5f98d12472854323b73e85","first_seen":"2026-07-06T15:52:17.410165Z","last_seen":"2026-07-07T03:05:14.98045Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260705-1/7dc061d1eee84eb31c84e4b23e2436d9.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.158Z","timestamp":1783393472158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260705-1/7dc061d1eee84eb31c84e4b23e2436d9.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a49dce8-2b60c\"\r\nexpires: Tue, 04 Aug 2026 05:05:55 GMT\r\nlast-modified: Sun, 05 Jul 2026 04:26:16 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 165516\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIIT1RJanlS3bttW3VgiG%2FVTS4rJd9jY%2BrCqOCW%2F0SM9xBda01xrmUfkgSb9DR9tGNRg1tIiLZN99GPRbZFBlNgaGqYTUn2XQFnHEyotuMaqBqzzghb%2FkyuBrXCB8QAXckIr\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f51188fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177676,"size_decoded":178225,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x535, components 3","md5":"93c8a452fcfa0906990814f1f83ab964","sha1":"b4b0c4405cdfb84e213cac018b4b5b349aacd756","sha256":"ea532cf09103058b4cc829afaf7ba2fe0fc3982e0407ba6e611a7d70a370a939","sha512":"3c4ffc7432aad92ee9e1dc9bf9f9ad291ccea735aa2cf4b27b98a0a42d05a33ab6260a2ce2a6a3d86adc9e65f4f69ee59304c09292ee1787e0ddd989fb66d900","ssdeep":"3072:6Vuxr8VD6VPDg0CGTGLYA5HQ78JbiISZna0YMLnaj3rbaX4gkKejURLDWeeSZQXE:ouxyDTsT+Q7KiIGTzhX4gjqxeebU","tlshash":"290413d94d9ad107b4868af2f468f18a4f87012867854b0c61616df2af2ff72d0dd63a","first_seen":"2025-10-02T17:49:30.992123Z","last_seen":"2026-07-07T05:11:18.371623Z","times_seen":8,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260704-1/a05c3dff985763445ded7866b18cd1e3.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.181Z","timestamp":1783393472181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260704-1/a05c3dff985763445ded7866b18cd1e3.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4890fa-10130\"\r\nexpires: Mon, 03 Aug 2026 09:06:22 GMT\r\nlast-modified: Sat, 04 Jul 2026 04:50:02 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 237489\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTRufgBWtLL850kcXxAuhTEUb7EsV892NQUJjOGhCIqjE22O0sxQmZGzxHx7Lb2V2zLnG0J5c6KpHOR%2B6NRLi%2BIkc1L%2FoKX3wZcMQwEWs9uBF0vPW3FmWVKm5DBFQommRS2u\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f512899a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65840,"size_decoded":66322,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 718x404, components 3","md5":"92dd2ae00a6b72ab9be661d1b0fec53a","sha1":"8470d898d3f4aef025c8429eaa9de91d3caeedbf","sha256":"48edcfaa447132b337850d615a69295968419b81b5000db6d11ec676e0b917b4","sha512":"452ad21c50a1b049f885716bee4edfedab4228820a3167de9d1ccdd31ed0178d9124d3462e4f3206e0314c78d4a30f154381eb734342dabaced582035928084b","ssdeep":"1536:QAW159OcPj64yz7AIuSV27VmsBu5lNNpJvzTXI+4Gel1/OTanUejbMMlqS:S1acPjs4BSGVm/zdIl12GH","tlshash":"5b5312366c8199e1dd211cb327b677054ecb1050842d811e0afae13ede56c6af87e17c","first_seen":"2026-07-06T01:59:00.536553Z","last_seen":"2026-07-12T23:02:15.67358Z","times_seen":6,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260626-1/f47a7f789d1461dc4e85e081c0d60235.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.194Z","timestamp":1783393472194,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260626-1/f47a7f789d1461dc4e85e081c0d60235.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260627-1/68c829affb5bed4c885454402d70cfdb.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.784Z","timestamp":1783393472784,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260627-1/68c829affb5bed4c885454402d70cfdb.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node91.aizhantj.com:21233/tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=92497842\u0026si=y3n5k8rpsl9\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=55054\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fjxqc99.com%2F\u0026lvt=1783393474\u0026tf=1783393474\u0026ej=1","fqdn":"node91.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"43.174.27.154","port":21233,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:33.857Z","timestamp":1783393473857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aizhantj.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 27 Jun 2026 16:38:52 GMT","end":"Tue, 12 Jan 2027 16:38:52 GMT"},"fingerprint":{"sha1":"5C:FE:66:59:7E:FD:DB:A5:B6:E4:B8:B0:C6:2C:62:77:77:DF:6D:21","sha256":"8E:DA:CA:F9:7F:3F:B2:15:0F:EA:44:2C:82:F7:1A:84:36:39:19:EC:5C:15:10:E9:DB:E5:BE:F7:BE:37:03:48"}}},"request":{"raw":"GET /tjpv/?cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=92497842\u0026si=y3n5k8rpsl9\u0026v=25.01.26\u0026lv=1\u0026api=0\u0026sn=55054\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fjxqc99.com%2F\u0026lvt=1783393474\u0026tf=1783393474\u0026ej=1 HTTP/1.1\r\nHost: node91.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://jxqc99.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS\r\nset-cookie: _aztj_sess=dcrr62ffpsvepfic2jkeeekb55; expires=Tue, 21 Jul 2026 03:04:34 GMT; Max-Age=1209600; path=/; secure; SameSite=None\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nx-mtj-pc: 28\r\nx-mtj-ml: 1\r\ncontent-encoding: gzip\r\nazp: p03\r\ndate: Tue, 07 Jul 2026 03:04:33 GMT\r\neo-log-uuid: 5567830851820627583\r\neo-cache-status: MISS\r\ncache-control: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":614,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-07-17T08:39:34.650098Z","times_seen":741790,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":325,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/favicon.ico","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:34.869Z","timestamp":1783393474869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dczjzx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:07:28 GMT","end":"Tue, 29 Sep 2026 17:07:27 GMT"},"fingerprint":{"sha1":"BD:9D:58:CF:9A:63:DF:4A:D0:86:1E:42:52:DF:B7:2A:42:2C:6F:B1","sha256":"01:E5:9F:2F:D0:51:D1:55:4E:D0:6A:07:7A:AA:68:DE:15:4E:96:CB:CE:AC:6A:04:C1:85:DA:AA:A8:22:F4:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jxqc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jxqc99.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: Hm_tf_y3n5k8rpsl9=1783393474; Hm_lvt_y3n5k8rpsl9=1783393474; Hm_lpvt_y3n5k8rpsl9=1783393474\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 03:04:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 59582\r\nlast-modified: Sun, 28 Jun 2026 07:48:56 GMT\r\netag: \"6a40d1e8-e8be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59582,"size_decoded":60024,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 120x120, 32 bits/pixel","md5":"61649f63936bd83af9290c1a2471fb5d","sha1":"bba1e9e22d84a32f95a4932e465751de368f0b5b","sha256":"1d0a5ab2f227c6d22d946995cc2f575c5b5624d1eb5a523956f4b2117bf8d0b0","sha512":"20b38e3fda4cc154b5728ebcc00e853c2a44ee21300966d22fd1eeaaded4d4cc68964f6aaa9b13ae78517a21ff1d8da55f0b66201ad1e22aed7ca2d1f2d727ff","ssdeep":"192:XhQ5sT5TXwLmejU7g5PYYuqR5BBoydze38Q6Gx2RfNT:lw1UMKYuqR5B2ydze38FGx2RfNT","tlshash":"54439c1d367bb109f80ce13fd845e8192abbdc29d63acac23105f65af5e29c16d4e41b","first_seen":"2026-07-02T06:56:19.119604Z","last_seen":"2026-07-12T23:02:15.665046Z","times_seen":7,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260627-1/750c41ad5bb24ec6d038585bf3624e46.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.189Z","timestamp":1783393472189,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260627-1/750c41ad5bb24ec6d038585bf3624e46.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/6cd188bade2c2fd17c1fe88a591cadfc.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.213Z","timestamp":1783393472213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/6cd188bade2c2fd17c1fe88a591cadfc.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b18ee-47c9b\"\r\nexpires: Wed, 05 Aug 2026 04:53:09 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:54:38 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79882\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qiGWJ7Inx31HImSeTnZKpfaRKGgRMwtvyu%2F5RkGnlZGkVLkS2SfUKOZ7CzLGpl6frVDpQSTJlkJzw3kXg2wDhBTgzr%2FBR%2FCbGFsJFj46%2BjrpdT%2BwmZ9%2BEFLYqI8ZnGsJiZxd\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f5158a3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294043,"size_decoded":278303,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3307, bps=194, compression=LZW, PhotometricInterpretation=CMYK, orientation=upper-left, width=4133], baseline, precision 8, 800x538, components 3","md5":"8082838150198a759f5ccf8da2d35c50","sha1":"6d5e774953232e8707bd8069d46ba89f3c99c48d","sha256":"495f225e257393a06a86e1e6ba47b6a0f4d8c9bc67677bc99984143776720858","sha512":"8673041500a7c80820753a762f43133f56a24512955a627d595219cb4cd8baf4001db0bed0fd3ee262dcc8e1c68cb6133476c2f70857c8313f7ab9ebed1a68f8","ssdeep":"6144:MkUk8pn3BWicgNeZ118ao9hpnX4JyFYW3kQrt0y7E/LDzxbPc1j:MJX/cgNeP18V9hZqha/7ELxY5","tlshash":"3e5412692b740f63e8c00ab85525ef4337641da5b31b4712f44e5d103f72da69c7e3aa","first_seen":"2026-07-06T15:52:17.424968Z","last_seen":"2026-07-07T03:05:14.982497Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260628-1/1af23a1337663252ef01ce832635dd2c.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.780Z","timestamp":1783393472780,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260628-1/1af23a1337663252ef01ce832635dd2c.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fm.sl25914.com/upload/vod/20250704-1/06e1d6d0d806b5d5fa31c3d85aae68f7.jpg","fqdn":"fm.sl25914.com","domain":"sl25914.com","tld":"com"},"ip":{"addr":"172.67.205.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.176Z","timestamp":1783393472176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl25914.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 15:59:39 GMT","end":"Fri, 07 Aug 2026 16:57:20 GMT"},"fingerprint":{"sha1":"68:87:8C:7B:DE:D3:1A:11:17:DB:3E:45:E4:91:14:28:26:52:D3:97","sha256":"D8:6A:F2:7B:42:5B:E3:8D:3D:09:D3:B8:A9:9F:EA:C6:13:B4:02:06:5F:8D:63:83:32:B1:2E:63:0A:35:27:50"}}},"request":{"raw":"GET /upload/vod/20250704-1/06e1d6d0d806b5d5fa31c3d85aae68f7.jpg HTTP/1.1\r\nHost: fm.sl25914.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"688ce68f-160f\"\r\nexpires: Fri, 31 Jul 2026 14:58:59 GMT\r\nlast-modified: Fri, 01 Aug 2025 16:08:47 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 475532\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6M86qY1t9jsC8Z8zZSWf5cHSP9zRheXKQFRi7qoFzZBBcXR5dTDl2J5XQs%2Bk%2F3SSWyZCmLORX%2BnY7gWFO3R4paQLANigbSGPivju%2FszreCWQg6vNqPoSLgNvYsAxSt4aQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f513bcdb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5647,"size_decoded":6083,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 137x205, components 3","md5":"47d04ea452fb477f0150a04ebbf0c480","sha1":"8204adc32d8346e808d7d8c3f1b63bf31b723b7b","sha256":"7c8176c68d7987f518135663dc8476e23976d5ff8841c8a5efc27b9ec2f77c63","sha512":"b96644a3e60965d93fc7a6757556ca1ecfe1085f533f0b17026ec4cc70646afcbb0bbfd2f3fd34cfee8d29f92d41c7597f10f326c366c13561eecc99bbc3ba98","ssdeep":"96:588ihotwoa5mmgU/noJwezQziHivw5t8XfWmE3tDICGi0db9:588ihoevcYxezQ+ivOGLqy9","tlshash":"4fc19e5de760e315de1ff13607409343e334e9ba875c066358e6a74c5f2ace24c8807a","first_seen":"2025-09-24T09:23:06.841716Z","last_seen":"2026-07-16T06:56:18.812107Z","times_seen":19,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jxqc99.com/","fqdn":"jxqc99.com","domain":"jxqc99.com","tld":"com"},"ip":{"addr":"104.233.251.204","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T03:04:30.704Z","timestamp":1783393470704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dczjzx.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Jul 2026 17:07:28 GMT","end":"Tue, 29 Sep 2026 17:07:27 GMT"},"fingerprint":{"sha1":"BD:9D:58:CF:9A:63:DF:4A:D0:86:1E:42:52:DF:B7:2A:42:2C:6F:B1","sha256":"01:E5:9F:2F:D0:51:D1:55:4E:D0:6A:07:7A:AA:68:DE:15:4E:96:CB:CE:AC:6A:04:C1:85:DA:AA:A8:22:F4:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jxqc99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 07 Jul 2026 03:04:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28913,"size_decoded":9282,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24758), with no line terminators","md5":"01629949e5707d38c255c95b6a095fe5","sha1":"c8478f29769482d82585ea3047e47359909c4207","sha256":"ae1137c2b45a931cdaba3af8d37a7304b65d9ce22451114812060eb76bba43f5","sha512":"6260ca6f3cfa8945946acd98592548629130c2d5ca4da4311520d35184c22beec46cc7e583584fcd4ecbe13fee98b84cdc75076ab842938b03704453ce4e1ee2","ssdeep":"384:Xc8xTC3Wq2+A5CpQDX+feoRf59D9TBp05Qsjy9ZsPi:t2ZlpTQ9EZsPi","tlshash":"3ad26372618a6037113788daf1b56b3db1e7924dce23480376fc53de9bc4d92998bc89","first_seen":"2026-07-07T03:05:14.983594Z","last_seen":"2026-07-07T03:05:14.983594Z","times_seen":1,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":133,"connect":178,"send":0,"wait":284,"receive":0,"ssl":361},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"jxqc99.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"jxqc99.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260628-1/1af23a1337663252ef01ce832635dd2c.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.188Z","timestamp":1783393472188,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260628-1/1af23a1337663252ef01ce832635dd2c.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op2.sl260630.top/upload/vod/20260706-1/b187b88b75bc837876b6fd546897f100.jpg","fqdn":"op2.sl260630.top","domain":"sl260630.top","tld":"top"},"ip":{"addr":"172.67.199.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.199Z","timestamp":1783393472199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sl260630.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 05:21:03 GMT","end":"Mon, 28 Sep 2026 06:19:33 GMT"},"fingerprint":{"sha1":"6C:0D:AA:F5:D3:7B:C2:85:D8:F5:48:B0:FC:A3:BC:0D:EE:2B:DB:FC","sha256":"9A:7B:5D:8D:46:D7:82:B4:31:C5:6A:9D:F4:A6:2C:89:A2:D5:E9:64:05:F2:D1:7C:0D:12:12:61:D6:01:DA:5C"}}},"request":{"raw":"GET /upload/vod/20260706-1/b187b88b75bc837876b6fd546897f100.jpg HTTP/1.1\r\nHost: op2.sl260630.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\ndate: Tue, 07 Jul 2026 03:04:32 GMT\r\netag: W/\"6a4b1994-583cc\"\r\nexpires: Wed, 05 Aug 2026 04:53:24 GMT\r\nlast-modified: Mon, 06 Jul 2026 02:57:24 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-cache: BYPASS, ChunkedEncoding\r\nage: 79867\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AH2s9B%2BXnqWjyM1nCrSsdGs4SoiESLhnHqY%2FbhCJvCWIu%2F8lqQt3y%2B5fnK9PwCB5JgLLg0%2BsG%2BHvGeqbuMLJqARMk1xo7Qq9m00bB32IQXj6V01Rq9jtvRKJ77e%2BQFXBSKTQ\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1739f51489ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361420,"size_decoded":344512,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=3307, bps=194, compression=LZW, PhotometricInterpretation=CMYK, orientation=upper-left, width=4133], baseline, precision 8, 800x538, components 3","md5":"7c0c1bd528ff84c85594a55084707ed9","sha1":"f4d0f3a99e63a2f5f8b9be9b8676b4a17092b279","sha256":"06fd2368967e66d0ab851ed8be5782c64e088c425c6d3e48be1d759465fda378","sha512":"c041d3bb52e7d98b45d1f5deaaf0d706206cdefd3b6b6ba6540545f1905f0cc5d305ff613350af6e68c91de2cd315552c4471c34c41bdc0c17ba76b2e0c3df68","ssdeep":"6144:6+EoQ5OmZpB6Y5ZzMMjEZLy4eMRpRXHlvGA62j5httiGH1l+ypUDn/4RrqcPCzhI:bQtZpB6M4MQU4f/RXU1e5hvH1ha8rMtM","tlshash":"1674236168723f0cedc48a706184dbb39762ede2d1574b55384cbdb21b736c9ee02a4e","first_seen":"2026-07-06T15:52:17.406823Z","last_seen":"2026-07-07T03:05:14.98449Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"op2.sl260630.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kh3aq.cc/10/105c5c242730i?_=1783393472717","fqdn":"kh3aq.cc","domain":"kh3aq.cc","tld":"cc"},"ip":{"addr":"43.198.113.184","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.743Z","timestamp":1783393472743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kh3aq.cc","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Sat, 01 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:67:68:49:99:2D:20:C2:47:7C:73:E5:DC:6E:65:A0:03:92:28:B5","sha256":"4B:1E:A6:40:95:33:12:06:5F:6F:F9:50:53:85:15:23:2E:CD:E1:B4:2A:2B:B1:C8:30:4A:72:E6:2B:C1:7B:CF"}}},"request":{"raw":"GET /10/105c5c242730i?_=1783393472717 HTTP/1.1\r\nHost: kh3aq.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 07 Jul 2026 03:04:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 154\r\nLocation: https://kh3aq.cc/b//10/105c5c242730i?_=1783393472717\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":2468,"timings":{"blocked":-1,"dns":550,"connect":272,"send":0,"wait":271,"receive":0,"ssl":1375},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260626-1/315d786ec4dd7a82803e3130c6f40616.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.768Z","timestamp":1783393472768,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260626-1/315d786ec4dd7a82803e3130c6f40616.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"u1.sl260521.top/upload/vod/20260626-1/f47a7f789d1461dc4e85e081c0d60235.jpg","fqdn":"u1.sl260521.top","domain":"sl260521.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jxqc99.com/","date":"2026-07-07T03:04:32.786Z","timestamp":1783393472786,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/vod/20260626-1/f47a7f789d1461dc4e85e081c0d60235.jpg HTTP/1.1\r\nHost: u1.sl260521.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jxqc99.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T09:40:24.656088Z","times_seen":17311088,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"u1.sl260521.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}