{"report_id":"3afe2fe2-5dbc-4719-a81d-516c805694a5","version":6,"status":"done","tags":[],"date":"2024-08-31T01:05:14Z","url":{"schema":"http","addr":"304av.com/video/45262.html","fqdn":"304av.com","domain":"304av.com","tld":"com"},"ip":{"addr":"192.151.224.138","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"about","addr":"about:neterror?e=dnsNotFound\u0026u=https%3A//51yw.app/\u0026c=UTF-8\u0026d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%2051yw.app.","fqdn":"","domain":"","tld":""},"title":"Server Not Found"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-09T08:28:23Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"23.225.67.83:3355","ip":{"addr":"23.225.67.83","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":277,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-08-30 18:12:09","alert_count":0,"request_count":4,"received_data":3549,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sfa1sdg224reger.com","ip":{"addr":"47.243.171.26","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":773,"sent_data":1401,"comment":"","tags":null,"fingerprints":null},{"fqdn":"qx.priejames.com","ip":{"addr":"46.149.194.161","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":2539,"sent_data":1006,"comment":"","tags":null,"fingerprints":null},{"fqdn":"51yw.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-07-18","domain_rank":0,"first_seen":"2021-07-21 04:52:40","last_seen":"2022-12-22 04:17:37","alert_count":1,"request_count":1,"received_data":0,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-08-30 18:12:14","alert_count":0,"request_count":4,"received_data":3550,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"304av.com","ip":{"addr":"192.151.224.138","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2015-02-12 17:24:04","last_seen":"2023-03-25 03:07:34","alert_count":0,"request_count":1,"received_data":1146,"sent_data":396,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-31","alert":"Sinkholed","trigger":"23.225.67.83","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-31","alert":"Sinkholed","trigger":"51yw.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:neterror?e=dnsNotFound\u0026u=https%3A//51yw.app/\u0026c=UTF-8\u0026d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%2051yw.app.","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:48.724316364Z","timestamp":1725066288724,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"35A446CEA345DBDB2C297726A3D6CC5F1088F4F9A3F65904C3B9655056EFDA06\"\r\nLast-Modified: Thu, 29 Aug 2024 09:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4374\r\nExpires: Sat, 31 Aug 2024 02:17:42 GMT\r\nDate: Sat, 31 Aug 2024 01:04:48 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c3d1bfb12515d2f23214f980f7a18b8c","sha1":"24cc3d9048888cc7e1f4ff42b8fdc1c16c9feb46","sha256":"35a446cea345dbdb2c297726a3d6cc5f1088f4f9a3f65904c3b9655056efda06","sha512":"fea4fd9597129b2c5994efceed92d62077e51cacbf6aa7a8f7dc23422954f7ed17c4dbe13ba3622c4a7715632fbf4f811fcf1424d52104fd70fe6bd0d547ba93","ssdeep":"","tlshash":"70f00553b235bd0165f0560537a5c0709d15bcad3410cbc2d05d8265bda67eac18600c","first_seen":"2024-08-29T11:20:29Z","last_seen":"2024-09-20T20:16:30.160025Z","times_seen":25767,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:48.726053013Z","timestamp":1725066288726,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"F6FC34ACB6B2D60BB37DD5CAF92B0988CDD52927D80D1F5E7BC23B7DB9E8209A\"\r\nLast-Modified: Sat, 31 Aug 2024 00:20:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=18920\r\nExpires: Sat, 31 Aug 2024 06:20:08 GMT\r\nDate: Sat, 31 Aug 2024 01:04:48 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"404e3e4520c09fcce1358b1a21f6b171","sha1":"040aa03460f3d7ec6f75cae0bf5a462a4bb9798d","sha256":"f6fc34acb6b2d60bb37dd5caf92b0988cdd52927d80d1f5e7bc23b7db9e8209a","sha512":"c6aeb0600af58d7b976deb390ccb1c0859bc7c7ab55009bb167c7045d9e3cf01720a61fde3cb6ece0776bf36becf6e8002e7cfb6740be1d0526213a3a08b2598","ssdeep":"","tlshash":"32f00ee1022efe41daf651021fa4f81a2f327eff394409f1054016923404ffd8a05094","first_seen":"2024-08-31T02:24:41Z","last_seen":"2024-09-20T20:16:30.159732Z","times_seen":36159,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:49.089885846Z","timestamp":1725066289089,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"7BFCA20B125A7CA370D17340CD1425663C1C6E81F8A0C42AA9703E88E2FA5EBD\"\r\nLast-Modified: Wed, 28 Aug 2024 14:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19813\r\nExpires: Sat, 31 Aug 2024 06:35:02 GMT\r\nDate: Sat, 31 Aug 2024 01:04:49 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"394892113e0ffb33f2ffdbe727637967","sha1":"6356e0f13c62b88d4f8a3a20336c86b21b9e7b43","sha256":"7bfca20b125a7ca370d17340cd1425663c1c6e81f8a0c42aa9703e88e2fa5ebd","sha512":"f4d791b5b75b935f8478245ff214748a8df0ed422419a64a3dcfe61f5aa79da44daaf171ca782500b473f015b9c93e0c9bfb68f864217a6df1994506a0d042ba","ssdeep":"","tlshash":"58f00ec62db4b9c2f573ac14a7edc80229312efadc8851d4dde001f799547f64368048","first_seen":"2024-08-29T01:57:24Z","last_seen":"2024-08-31T08:33:00.106631Z","times_seen":14619,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:49.388316296Z","timestamp":1725066289388,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"965090DF69898508429E57657077A1625C55DD348039F37CBB2451D9460886A0\"\r\nLast-Modified: Wed, 28 Aug 2024 14:38:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5341\r\nExpires: Sat, 31 Aug 2024 02:33:50 GMT\r\nDate: Sat, 31 Aug 2024 01:04:49 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fdbea8492a4c466e40797f5c241f80c0","sha1":"5b54da6a3949155c0e32e21a9c438e255ad71720","sha256":"965090df69898508429e57657077a1625c55dd348039f37cbb2451d9460886a0","sha512":"f43dec62f6c58b45fc39640690d5ede587ae9eab854f288c04a4262f26fd93b4ffa1c765bef3e3982a94097ba910d2ba9a752c6e1643b4921a772016e5d63bd2","ssdeep":"","tlshash":"c5f00ed826eee4b09abcf0082ce9d1eb0e21aead3c1c55c024ca06e0e0597e816d909c","first_seen":"2024-08-28T22:52:24Z","last_seen":"2024-08-31T08:36:25.962968Z","times_seen":18617,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"304av.com/video/45262.html","fqdn":"304av.com","domain":"304av.com","tld":"com"},"ip":{"addr":"192.151.224.138","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:49.787866246Z","timestamp":1725066289787,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /video/45262.html HTTP/1.1\r\nHost: 304av.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html;charset=utf-8\r\nCache-Control: max-age=86400\r\nContent-Length: 1019\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1019,"size_decoded":1019,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"058b92e7f01a59620337aea81ce190d3","sha1":"0c84c6f599d4676e7c8aef8e9b52256bad95bcc1","sha256":"751bc8699f2bd636b1140e51437bb7fee5d20768ff5fc47c470b586598f48671","sha512":"cef64cf2fd8dbfde6e347219177ba82387e728b89239dd84e4a9aee8b0496884b0bb555b7c0fdb9bc78ff13e225f759c443846a0b129464fd3498a6929a2a3f8","ssdeep":"","tlshash":"9411e75224e2207d0a63916557e3f70f34c35a5357129440f29c8d564fd4f4ac8e75fc","first_seen":"2024-08-31T03:05:21Z","last_seen":"2024-08-31T08:28:23.429326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"23.225.67.83:3355/?r=aHR0cDovLzMwNGF2LmNvbS92aWRlby80NTI2Mi5odG1s","fqdn":"23.225.67.83:3355","domain":"23.225.67.83","tld":"83:3355"},"ip":{"addr":"23.225.67.83","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:50.248203613Z","timestamp":1725066290248,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /?r=aHR0cDovLzMwNGF2LmNvbS92aWRlby80NTI2Mi5odG1s HTTP/1.1\r\nHost: 23.225.67.83:3355\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://304av.com/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 31 Aug 2024 01:04:50 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 66\r\nConnection: keep-alive\r\nLocation: http://sfa1sdg224reger.com/video/45262.html\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":66,"size_decoded":66,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"003c4e47d201fbf0fd44932868327286","sha1":"61b4fee9807f2a63fbfbcb4f270cfa47e5a125e5","sha256":"b537c8e4479d4c2fb4358f97af61858ba50a95fc70bd6822f4d2e866c1e5e593","sha512":"3a4288a45cedb412209fbe1710677b3cb93987d3e8e0bc9470d6eec5a8753dd5cb4f2f909ef3ed16c2c6ab2ccb2934b81301f73af5661e9b3275c2c649ce5378","ssdeep":"","tlshash":"eba0026404d9145d0e6b8762a4d4b049989642c6a4e897c1664768066655ad213f839a","first_seen":"2024-08-31T08:28:23.430263Z","last_seen":"2024-08-31T08:28:23.430263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-31","alert":"Sinkholed","trigger":"23.225.67.83","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:51.37635554Z","timestamp":1725066291376,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"046AD0EF1EDF8B14AA2CF41003A5110A407E8FA1B6E81EEA7ABDAF2A0C43CD2A\"\r\nLast-Modified: Wed, 28 Aug 2024 14:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4316\r\nExpires: Sat, 31 Aug 2024 02:16:47 GMT\r\nDate: Sat, 31 Aug 2024 01:04:51 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ef027163bf75ba005d26e45baa952209","sha1":"d2c6e867dec63f1f0eff9895c06a43520b1614dd","sha256":"046ad0ef1edf8b14aa2cf41003a5110a407e8fa1b6e81eea7abdaf2a0c43cd2a","sha512":"b00db6421ef089d5e3788cc9af149d59af5a442c07699c217036f7530f2f2269a2403ac801679c0abc2465b7fbefae36273edf7500e08d623a864df679d193d7","ssdeep":"","tlshash":"8ef00ec235395c8108a80c3a4bc5e07b1e200ff85e888598a2a883e078637ee15c660c","first_seen":"2024-08-28T20:43:26Z","last_seen":"2024-08-31T08:32:12.188821Z","times_seen":10667,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:51.37742154Z","timestamp":1725066291377,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"046AD0EF1EDF8B14AA2CF41003A5110A407E8FA1B6E81EEA7ABDAF2A0C43CD2A\"\r\nLast-Modified: Wed, 28 Aug 2024 14:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4316\r\nExpires: Sat, 31 Aug 2024 02:16:47 GMT\r\nDate: Sat, 31 Aug 2024 01:04:51 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ef027163bf75ba005d26e45baa952209","sha1":"d2c6e867dec63f1f0eff9895c06a43520b1614dd","sha256":"046ad0ef1edf8b14aa2cf41003a5110a407e8fa1b6e81eea7abdaf2a0c43cd2a","sha512":"b00db6421ef089d5e3788cc9af149d59af5a442c07699c217036f7530f2f2269a2403ac801679c0abc2465b7fbefae36273edf7500e08d623a864df679d193d7","ssdeep":"","tlshash":"8ef00ec235395c8108a80c3a4bc5e07b1e200ff85e888598a2a883e078637ee15c660c","first_seen":"2024-08-28T20:43:26Z","last_seen":"2024-08-31T08:32:12.188821Z","times_seen":10667,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:51.378532446Z","timestamp":1725066291378,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"046AD0EF1EDF8B14AA2CF41003A5110A407E8FA1B6E81EEA7ABDAF2A0C43CD2A\"\r\nLast-Modified: Wed, 28 Aug 2024 14:34:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4316\r\nExpires: Sat, 31 Aug 2024 02:16:47 GMT\r\nDate: Sat, 31 Aug 2024 01:04:51 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"ef027163bf75ba005d26e45baa952209","sha1":"d2c6e867dec63f1f0eff9895c06a43520b1614dd","sha256":"046ad0ef1edf8b14aa2cf41003a5110a407e8fa1b6e81eea7abdaf2a0c43cd2a","sha512":"b00db6421ef089d5e3788cc9af149d59af5a442c07699c217036f7530f2f2269a2403ac801679c0abc2465b7fbefae36273edf7500e08d623a864df679d193d7","ssdeep":"","tlshash":"8ef00ec235395c8108a80c3a4bc5e07b1e200ff85e888598a2a883e078637ee15c660c","first_seen":"2024-08-28T20:43:26Z","last_seen":"2024-08-31T08:32:12.188821Z","times_seen":10667,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sfa1sdg224reger.com/video/45262.html","fqdn":"sfa1sdg224reger.com","domain":"sfa1sdg224reger.com","tld":"com"},"ip":{"addr":"47.243.171.26","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-08-31T01:04:52.417Z","timestamp":1725066292417,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /video/45262.html HTTP/1.1\r\nHost: sfa1sdg224reger.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://304av.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 503 Service Temporarily Unavailable\r\nDate: Sat, 31 Aug 2024 01:04:51 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: 0e176b3baa27388807309c17624324f4=d3c595a7804c8e8bde5df18b2f426d14\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":55,"size_decoded":55,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b25d3c49b996fd397d1ec1f02189586c","sha1":"b878ac9e9575ceec18e74cff70ec4be21b8fa8a8","sha256":"d45ee8448d3f60ed3bdbb829419dee91f0f6b3d8e72f29575ce7ddd1cc74f1e2","sha512":"c63b63ed39feec556cc3fb1ccbbcc8e850e2c9cd36894dc7aa1601e20d7622cb6de862e455f625cf31e66a0e1bd21c46ae879f66021005605062864305de1b04","ssdeep":"","tlshash":"7b9002c98c14c54d558115455475f04c16aa08964615e98914c19a1452043f90d12acd","first_seen":"2024-08-16T18:52:22Z","last_seen":"2026-04-05T04:08:27.103844Z","times_seen":1782,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sfa1sdg224reger.com/favicon.ico","fqdn":"sfa1sdg224reger.com","domain":"sfa1sdg224reger.com","tld":"com"},"ip":{"addr":"47.243.171.26","port":0,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:52.181710926Z","timestamp":1725066292181,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sfa1sdg224reger.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://sfa1sdg224reger.com/video/45262.html\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 503 Service Temporarily Unavailable\r\nDate: Sat, 31 Aug 2024 01:04:52 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: 0e176b3baa27388807309c17624324f4=d3c595a7804c8e8bde5df18b2f426d14\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":55,"size_decoded":55,"mime_type":"text/plain; charset=utf-8","magic":"HTML document, ASCII text","md5":"b25d3c49b996fd397d1ec1f02189586c","sha1":"b878ac9e9575ceec18e74cff70ec4be21b8fa8a8","sha256":"d45ee8448d3f60ed3bdbb829419dee91f0f6b3d8e72f29575ce7ddd1cc74f1e2","sha512":"c63b63ed39feec556cc3fb1ccbbcc8e850e2c9cd36894dc7aa1601e20d7622cb6de862e455f625cf31e66a0e1bd21c46ae879f66021005605062864305de1b04","ssdeep":"","tlshash":"7b9002c98c14c54d558115455475f04c16aa08964615e98914c19a1452043f90d12acd","first_seen":"2024-08-16T18:52:22Z","last_seen":"2026-04-05T04:08:27.103844Z","times_seen":1782,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"sfa1sdg224reger.com/video/45262.html","fqdn":"sfa1sdg224reger.com","domain":"sfa1sdg224reger.com","tld":"com"},"ip":{"addr":"47.243.171.26","port":80,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-08-31T01:04:52.417Z","timestamp":1725066292417,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /video/45262.html HTTP/1.1\r\nHost: sfa1sdg224reger.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://sfa1sdg224reger.com/video/45262.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 0e176b3baa27388807309c17624324f4=d3c595a7804c8e8bde5df18b2f426d14; 0e176b3baa27388807309c17624324f4=d3c595a7804c8e8bde5df18b2f426d14\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 31 Aug 2024 01:04:52 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://qx.priejames.com/download/299_0.html/video/45262.html\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.77.32","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-08-31T01:04:53.363013307Z","timestamp":1725066293363,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"AB471BBCCE56D753351142881B5B67A7FB65F35D5F013F48D625286FB9D5037C\"\r\nLast-Modified: Fri, 30 Aug 2024 09:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=10842\r\nExpires: Sat, 31 Aug 2024 04:05:35 GMT\r\nDate: Sat, 31 Aug 2024 01:04:53 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"343846a9500361e7c5d4fe01e1fa0113","sha1":"c910e7eeb1e1589b4dd52413b9eaaff08c8680d0","sha256":"ab471bbcce56d753351142881b5b67a7fb65f35d5f013f48d625286fb9d5037c","sha512":"7d6ef389ebbf8f5ed4a77fe01f083e501eaec4a49c03321a2017dafcc04c26497249e93a537e3c86c0969b177a1972fe8b528a7a383929f7fc3bb31a05dd3cc9","ssdeep":"","tlshash":"97f09e71591a69449ea905aac9f8ea392a356da87410f8f664e403b23c45bbe44c445c","first_seen":"2024-08-31T02:39:34Z","last_seen":"2024-08-31T08:28:31.356117Z","times_seen":17,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qx.priejames.com/download/299_0.html/video/45262.html","fqdn":"qx.priejames.com","domain":"priejames.com","tld":"com"},"ip":{"addr":"46.149.194.161","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-08-31T01:04:52.766Z","timestamp":1725066292766,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.priejames.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Aug 2024 07:32:55 GMT","end":"Thu, 28 Nov 2024 07:32:54 GMT"},"fingerprint":{"sha1":"4C:49:C7:20:32:F9:47:C4:3D:76:AD:76:1E:EB:DD:05:81:D5:EE:EB","sha256":"68:2D:14:FB:1C:7B:B1:B0:D2:30:6D:15:1F:38:AC:01:BA:FF:C3:0E:E7:F0:E8:E6:8C:2B:9A:C6:F5:61:1C:D1"}}},"request":{"raw":"GET /download/299_0.html/video/45262.html HTTP/1.1\r\nHost: qx.priejames.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://sfa1sdg224reger.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 31 Aug 2024 01:04:53 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 06 Dec 2021 09:48:18 GMT\r\nETag: W/\"c074aa6586ead71:0\"\r\nServer: qq.com\r\nX-Cache-Status: MISS\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":979,"size_decoded":1911,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"18635fbfcf32c70ba48c411970d6d4e4","sha1":"fa5562b00e699f20da1e829f8aab78a319880b6e","sha256":"383f871261c66de9f2e40bad2dcf87e4c4b29c59d5350db9b48afa3ca0e96c65","sha512":"25d6c2d186c4fbf6bb9a13ab5c9b5818ae502755f3f6e15ed60c8ff3efbfd62cb762639a0ab182a12c6a9bcf3469966f6ebc990059dc96360d652f86aeb5fba4","ssdeep":"","tlshash":"ff41655a4082440821b3e772ebf7d348ff12015346440665b98c66a7bff5929c5a3fcc","first_seen":"2023-05-12T06:28:20Z","last_seen":"2024-12-13T21:58:05.08483Z","times_seen":210,"resource_available":false,"data":null}},"time_used":1789,"timings":{"blocked":598,"dns":0,"connect":290,"send":0,"wait":592,"receive":0,"ssl":304},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qx.priejames.com/favicon.ico","fqdn":"qx.priejames.com","domain":"priejames.com","tld":"com"},"ip":{"addr":"46.149.194.161","port":443,"asn":59371,"as":"Dimension Network \u0026 Communication Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qx.priejames.com/download/299_0.html/video/45262.html","date":"2024-08-31T01:04:54.238Z","timestamp":1725066294238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.priejames.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Aug 2024 07:32:55 GMT","end":"Thu, 28 Nov 2024 07:32:54 GMT"},"fingerprint":{"sha1":"4C:49:C7:20:32:F9:47:C4:3D:76:AD:76:1E:EB:DD:05:81:D5:EE:EB","sha256":"68:2D:14:FB:1C:7B:B1:B0:D2:30:6D:15:1F:38:AC:01:BA:FF:C3:0E:E7:F0:E8:E6:8C:2B:9A:C6:F5:61:1C:D1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qx.priejames.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qx.priejames.com/download/299_0.html/video/45262.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 31 Aug 2024 01:04:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Mon, 06 Dec 2021 09:48:18 GMT\r\nETag: W/\"c074aa6586ead71:0\"\r\nServer: qq.com\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":979,"size_decoded":1911,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"18635fbfcf32c70ba48c411970d6d4e4","sha1":"fa5562b00e699f20da1e829f8aab78a319880b6e","sha256":"383f871261c66de9f2e40bad2dcf87e4c4b29c59d5350db9b48afa3ca0e96c65","sha512":"25d6c2d186c4fbf6bb9a13ab5c9b5818ae502755f3f6e15ed60c8ff3efbfd62cb762639a0ab182a12c6a9bcf3469966f6ebc990059dc96360d652f86aeb5fba4","ssdeep":"","tlshash":"ff41655a4082440821b3e772ebf7d348ff12015346440665b98c66a7bff5929c5a3fcc","first_seen":"2023-05-12T06:28:20Z","last_seen":"2024-12-13T21:58:05.08483Z","times_seen":210,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"51yw.app/","fqdn":"51yw.app","domain":"51yw.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-08-31T01:04:57.138Z","timestamp":1725066297138,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 51yw.app\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qx.priejames.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-08-31","alert":"Sinkholed","trigger":"51yw.app","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
