{"report_id":"3c971ce5-be3d-4dcc-90f3-a5a09304bf7a","version":0,"status":"done","tags":[],"date":"2026-09-20T08:50:18Z","url":{"schema":"http","addr":"www.bjhxzc.cn/","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"154.218.170.177","port":0,"asn":137951,"as":"ASLINE LIMITED","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"http","addr":"www.bjhxzc.cn/","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"title":"bjhxzc.cn/","dom":{"size":1240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1240), with no line terminators","md5":"f266f77161a68f6d3fe620923aa14617","sha1":"486230756dbdaa41a31bbaa4883bab652e03ab40","sha256":"2ad46d4bd4280cd5485cba4e7f48488311ad627cece27a8249ff92a8a2966910","sha512":"61c040580cde74391878b7c3f024c58ee8f3348fad8198bbbf72717b8c7f67f947b71902820a214533557bcc65b18b2afceb93a5e87a6b6a6f9498dc7b59c6bd","ssdeep":"","tlshash":"272102d79d4ada1c1124a8d1f070f14c3a3f662abb29cc15d5f5292466287de4c6a894","dom_hash":"domhash1b5b65c10b813a04d857188869242aa8","first_seen":"2026-09-20T08:50:25.288082Z","last_seen":"2026-09-20T08:50:25.288082Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.bjhxzc.cn/","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"154.218.170.177","port":0,"asn":137951,"as":"ASLINE LIMITED","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T08:50:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"code.jqueryoss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"154.218.174.168","ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":204578,"sent_data":3046,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.bjhxzc.cn","ip":{"addr":"154.218.170.177","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2022-10-19","domain_rank":0,"first_seen":"2026-09-20T08:50:19.009809Z","last_seen":"2026-09-20T08:50:19.009809Z","alert_count":0,"request_count":4,"received_data":2625,"sent_data":1688,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"code.jqueryoss.com","ip":{"addr":"45.150.167.82","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"domain_registered":"2025-08-07","domain_rank":0,"first_seen":"2025-08-27T23:22:46.329603Z","last_seen":"2026-08-07T23:00:02.918689Z","alert_count":3,"request_count":3,"received_data":266475,"sent_data":1450,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"154.218.174.168/pc.php","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"aefa9c9bcc21fa7dbf8a42b4c929340d","sha1":"d59e1b80aa489f3aa59b2b1a83fd0ff0204c0187","sha256":"10a1c043ce421b99700fec4a6ebf1c8482978b9aefd539255866c87d589038eb","sha512":"8e55e6ab8bf7fddcd99285fde2c76e05d128f68ce525ed5b0516155073485cb9cd8bd4d34b121ba78e27bce33c97e13461af990eb7f71d5a02d575d5187bb43f","ssdeep":"","tlshash":"e4d02b987e15683527540cf7c279f9453f37283859294516c59ecc045134fda48b5924","size":273,"data":"","first_seen":"2025-10-18T00:00:43.990145Z","last_seen":"2026-09-20T08:50:25.314271Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/link.js","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9868603ff96c801fd38ccfdd5921493","sha1":"6a85f092a74209c00b739a788537bbb11802e1d5","sha256":"39594e0c7bd4163ba8768699ed87b50bafffe50e3adb8469e5542ccbb6c23275","sha512":"82a0ea121e62a6cffdd4d40ae6ba228e92efd59bbf662ac6ba87d91f4a49c996018e19b9f859e6018db2d7c1bcc1cbbca7c7429911dcbdd94c99b137a2222bec","ssdeep":"","tlshash":"6a41ad5fe180aec6083692d0d5377618e28d633ed453cc96bfae2fe91729107af22125","size":2360,"data":"","first_seen":"2026-09-20T08:50:25.295774Z","last_seen":"2026-09-20T08:50:25.295774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jqueryoss.com/ajax/libs/jquery/3.8.1/jquery.min.js","fqdn":"code.jqueryoss.com","domain":"jqueryoss.com","tld":"com"},"ip":{"addr":"45.150.167.82","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d19a0a5fe2e8cae17220c9d68203007","sha1":"a4865fea2ea2eb81fc37bf2376d76d8628c5dbdd","sha256":"64145c6d6a833aa9ecea3fa1743fc7beeba85df181d71d96f13b8687a04c67e9","sha512":"f99623de6ebabcb512d38e72ad529538e5b87dcf2687e27bf54839fd1192de07694705572cadfd610887049286da074fe96e36edc9ba3da5d9b13220d28ba361","ssdeep":"1536:dRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKLU0Ab:lHNwcv9VBQpLl88SMBQ47GKIF","tlshash":"7183e7df77ca702247ab20ba407f550bf276199d684d4400f159d8e9bc78a4a823bf7e","size":88221,"data":"","first_seen":"2026-09-20T08:50:25.297887Z","last_seen":"2026-09-20T08:50:25.297887Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bjhxzc.cn/tz.js","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"154.218.170.177","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"17c82183f03b379c3f6f46bd675cc639","sha1":"21eac8b42382e608578a2b8a0fb275a77f931383","sha256":"61f6ba061d5c9f4252cf89d58bc2a99145f5915dc3062931eebf31e5025ad174","sha512":"15e0b63c9b9823cf94fd5f3f43f0df6f1b1e8a6068edc1e21146d6b2213f4721a9e40745054cca7eadc712f9986f22271454210373424bb8fcb82756234eee66","ssdeep":"","tlshash":"e521207f0d6298289326a41e707689c834f4902a3a20c901f4fcfd556fb8f54587e7c8","size":1337,"data":"","first_seen":"2026-07-19T09:18:59.389525Z","last_seen":"2026-09-20T08:50:25.312096Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/static/code.js","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e154ddbf4a212b8a2985e054d16a45e","sha1":"19077cd649dd567567678e5b57cb0abffe9fba05","sha256":"7f7d252809d5a5e10c4a132c5fa0c362066b541ecd40bf5284812bb2a464a08c","sha512":"3d51f5bfb44ee8fda43899b3221bb104330bd9949cf77097966ddbf9ee17e165641ffa0249ec40c271f86eef309d21dbf17970243b8f95180036a87226b04bf2","ssdeep":"","tlshash":"81a0019d02a0883c420b99106e2a4f402ecc36790512f0996e5d9b44406a36f92e73b9","size":74,"data":"","first_seen":"2024-06-28T15:49:39Z","last_seen":"2026-09-20T08:50:25.293771Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bjhxzc.cn/","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"154.218.170.177","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"aefa9c9bcc21fa7dbf8a42b4c929340d","sha1":"d59e1b80aa489f3aa59b2b1a83fd0ff0204c0187","sha256":"10a1c043ce421b99700fec4a6ebf1c8482978b9aefd539255866c87d589038eb","sha512":"8e55e6ab8bf7fddcd99285fde2c76e05d128f68ce525ed5b0516155073485cb9cd8bd4d34b121ba78e27bce33c97e13461af990eb7f71d5a02d575d5187bb43f","ssdeep":"","tlshash":"e4d02b987e15683527540cf7c279f9453f37283859294516c59ecc045134fda48b5924","size":273,"data":"","first_seen":"2025-10-18T00:00:43.990145Z","last_seen":"2026-09-20T08:50:25.314271Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"154.218.174.168/pc.php","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://www.bjhxzc.cn/","date":"2026-09-20T08:49:50.700Z","timestamp":1789894190700,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /pc.php HTTP/1.1\r\nHost: 154.218.174.168\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.bjhxzc.cn/\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:50 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Length: 943\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2571,"size_decoded":1217,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (332)","md5":"7e5ecad02081c50e8b4ccb74f91e793a","sha1":"434a83b9417b3d9c225738cb5205459b0cee37f8","sha256":"e331c1a0741cf329da335aacd6e47471102944f5f0a47cfe890c50b4b4e69203","sha512":"51d8dc05cbce60b01b69bcdd486bb9e4297ec2723b568de0951f67e7459935a2cdf1bb96ab36a03c79e1855c955e3418ce53051a5b0d51c152482e047524c1b7","ssdeep":"","tlshash":"335155802ce3e0151293a4b047f6e21c7a69a427eb2acc08fddd87559f54b8dcdd37a4","first_seen":"2026-03-08T14:56:29.862639Z","last_seen":"2026-09-20T08:50:25.290913Z","times_seen":4,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":144,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bjhxzc.cn/favicon.ico","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"154.218.170.177","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.bjhxzc.cn/","date":"2026-09-20T08:49:50.804Z","timestamp":1789894190804,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.bjhxzc.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.bjhxzc.cn/\r\nCookie: hasVisited178a=1\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:51 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 30 Jul 2019 15:51:36 GMT\r\nETag: \"0-58ee7fbc2f200\"\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":306,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T10:41:54.381069Z","times_seen":18566567,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":143,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/static/code.js","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.028Z","timestamp":1789894191028,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/code.js HTTP/1.1\r\nHost: 154.218.174.168\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/pc.php\r\nCookie: hasVisited178a=1\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:51 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Wed, 12 Nov 2025 11:24:01 GMT\r\nETag: \"4a-64364004b7640-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Length: 73\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":74,"size_decoded":436,"mime_type":"text/javascript","magic":"ASCII text","md5":"3e154ddbf4a212b8a2985e054d16a45e","sha1":"19077cd649dd567567678e5b57cb0abffe9fba05","sha256":"7f7d252809d5a5e10c4a132c5fa0c362066b541ecd40bf5284812bb2a464a08c","sha512":"3d51f5bfb44ee8fda43899b3221bb104330bd9949cf77097966ddbf9ee17e165641ffa0249ec40c271f86eef309d21dbf17970243b8f95180036a87226b04bf2","ssdeep":"","tlshash":"81a0019d02a0883c420b99106e2a4f402ecc36790512f0996e5d9b44406a36f92e73b9","first_seen":"2024-06-28T15:49:39Z","last_seen":"2026-09-20T08:50:25.293771Z","times_seen":7,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":143,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/link.js","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.037Z","timestamp":1789894191037,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /link.js HTTP/1.1\r\nHost: 154.218.174.168\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/pc.php\r\nCookie: hasVisited178a=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:51 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Sun, 30 Aug 2026 03:22:39 GMT\r\nETag: \"938-65a3b32ab9d41-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Length: 610\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2360,"size_decoded":975,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"b9868603ff96c801fd38ccfdd5921493","sha1":"6a85f092a74209c00b739a788537bbb11802e1d5","sha256":"39594e0c7bd4163ba8768699ed87b50bafffe50e3adb8469e5542ccbb6c23275","sha512":"82a0ea121e62a6cffdd4d40ae6ba228e92efd59bbf662ac6ba87d91f4a49c996018e19b9f859e6018db2d7c1bcc1cbbca7c7429911dcbdd94c99b137a2222bec","ssdeep":"","tlshash":"6a41ad5fe180aec6083692d0d5377618e28d633ed453cc96bfae2fe91729107af22125","first_seen":"2026-09-20T08:50:25.295774Z","last_seen":"2026-09-20T08:50:25.295774Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":143,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jqueryoss.com/ajax/libs/jquery/3.8.1/jquery.min.js","fqdn":"code.jqueryoss.com","domain":"jqueryoss.com","tld":"com"},"ip":{"addr":"45.150.167.82","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.326Z","timestamp":1789894191326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jqueryoss.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 01:47:29 GMT","end":"Wed, 09 Dec 2026 01:47:28 GMT"},"fingerprint":{"sha1":"95:C8:39:C5:DA:7C:17:5A:AD:C3:65:9B:8B:37:C5:0C:4B:D6:43:A9","sha256":"82:49:AD:50:B3:5D:A5:F5:D1:6E:08:8A:69:85:A5:11:D2:2F:57:B6:9E:EF:F0:2E:C9:61:B8:AE:6E:05:5B:81"}}},"request":{"raw":"GET /ajax/libs/jquery/3.8.1/jquery.min.js HTTP/1.1\r\nHost: code.jqueryoss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 08:49:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Aug 2026 07:51:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a82bd8d-1589d\"\r\nset-cookie: server_session_2b1bbc3f=557b1900d52e6dc08a3c0fc5c08f9f96; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_2b1bbc3f","value":"557b1900d52e6dc08a3c0fc5c08f9f96","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_2b1bbc3f=557b1900d52e6dc08a3c0fc5c08f9f96; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88221,"size_decoded":31464,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"1d19a0a5fe2e8cae17220c9d68203007","sha1":"a4865fea2ea2eb81fc37bf2376d76d8628c5dbdd","sha256":"64145c6d6a833aa9ecea3fa1743fc7beeba85df181d71d96f13b8687a04c67e9","sha512":"f99623de6ebabcb512d38e72ad529538e5b87dcf2687e27bf54839fd1192de07694705572cadfd610887049286da074fe96e36edc9ba3da5d9b13220d28ba361","ssdeep":"1536:dRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKLU0Ab:lHNwcv9VBQpLl88SMBQ47GKIF","tlshash":"7183e7df77ca702247ab20ba407f550bf276199d684d4400f159d8e9bc78a4a823bf7e","first_seen":"2026-09-20T08:50:25.297887Z","last_seen":"2026-09-20T08:50:25.297887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"code.jqueryoss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/static/picture/bg1.jpg","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.032Z","timestamp":1789894191032,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/bg1.jpg HTTP/1.1\r\nHost: 154.218.174.168\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/pc.php\r\nCookie: hasVisited178a=1\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:51 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 02 Apr 2024 12:20:00 GMT\r\nETag: \"15211-6151c1ff9dc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 86545\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":86545,"size_decoded":86857,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3840x2160, components 3","md5":"ea68b88baf20c974aca2dfc04c3d2260","sha1":"5b32700ad6ccec9ab72ff036fc0eb7a590b94e49","sha256":"346245dbeb20cb69fe0b18a656607d02ee9f4a309512ffaf4e0d62bbaec27496","sha512":"8e4bff2148e3744a33e42bf8bb34b4b327037ccdf914e53f622818643ac646e4a3525592250782a6805044401ed165e168c8a652d2d040e811da49fced1ffaa3","ssdeep":"1536:vBFikRFqCGs8k7uZyYzww5Wer4/WKl9YaAe1pcd:vBRRS8KZyjwlr4/VlfAe1pcd","tlshash":"5f837c53eb0125fac8a81b705de71b257fb340b997e30206aa6554286db73143ebefc1","first_seen":"2023-06-05T20:28:18Z","last_seen":"2026-09-20T08:50:25.300609Z","times_seen":402,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":278,"dns":0,"connect":143,"send":0,"wait":286,"receive":333,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/static/picture/ayx.png","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.041Z","timestamp":1789894191041,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/ayx.png HTTP/1.1\r\nHost: 154.218.174.168\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/pc.php\r\nCookie: hasVisited178a=1\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:51 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 02 Apr 2024 12:20:00 GMT\r\nETag: \"5f90-6151c1ff9dc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 24464\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24464,"size_decoded":24774,"mime_type":"image/png","magic":"PNG image data, 918 x 220, 8-bit colormap, non-interlaced","md5":"553c082a1103cfc44f9813dcb343600f","sha1":"930cca7568d14b8523fe966f891c6dd761dc63ed","sha256":"6a25744e4e31c7dff4d2f2b8584a5ee1e74be7ba317782dd38bd5e262b12b9dc","sha512":"5b4d194d556b6664724c70c43ea37aa61e5363166f29b765eb6b488c56b9ecdd53768e9b37d5d5910c5ac705cb4ccdaa12cd4272219581b3ea0128ed2dc70e53","ssdeep":"384:/9jt2Q/rZrRkpvxRvLMUQg/hDgRjhA7hICVzdtby9PQ7+mOE0ig2PcGVSw+bRJTp:lt2Q/1NGvPZQShkRKzTvhOED/Sw+DdRV","tlshash":"b6b2e0a97947161ab4dd74ccae43a419f1f64ed030768201d23aba9b623479f0c3ee5e","first_seen":"2023-06-18T09:25:34Z","last_seen":"2026-09-20T08:50:25.302439Z","times_seen":298,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":272,"dns":0,"connect":143,"send":0,"wait":287,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jqueryoss.com/ajax/libs/jquery/3.8.1/jquery.min.js","fqdn":"code.jqueryoss.com","domain":"jqueryoss.com","tld":"com"},"ip":{"addr":"45.150.167.82","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.045Z","timestamp":1789894191045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jqueryoss.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 01:47:29 GMT","end":"Wed, 09 Dec 2026 01:47:28 GMT"},"fingerprint":{"sha1":"95:C8:39:C5:DA:7C:17:5A:AD:C3:65:9B:8B:37:C5:0C:4B:D6:43:A9","sha256":"82:49:AD:50:B3:5D:A5:F5:D1:6E:08:8A:69:85:A5:11:D2:2F:57:B6:9E:EF:F0:2E:C9:61:B8:AE:6E:05:5B:81"}}},"request":{"raw":"GET /ajax/libs/jquery/3.8.1/jquery.min.js HTTP/1.1\r\nHost: code.jqueryoss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 08:49:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Aug 2026 07:51:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a82bd8d-1589d\"\r\nset-cookie: server_session_2b1bbc3f=557b1900d52e6dc08a3c0fc5c08f9f96; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_2b1bbc3f","value":"557b1900d52e6dc08a3c0fc5c08f9f96","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_2b1bbc3f=557b1900d52e6dc08a3c0fc5c08f9f96; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88221,"size_decoded":31464,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"1d19a0a5fe2e8cae17220c9d68203007","sha1":"a4865fea2ea2eb81fc37bf2376d76d8628c5dbdd","sha256":"64145c6d6a833aa9ecea3fa1743fc7beeba85df181d71d96f13b8687a04c67e9","sha512":"f99623de6ebabcb512d38e72ad529538e5b87dcf2687e27bf54839fd1192de07694705572cadfd610887049286da074fe96e36edc9ba3da5d9b13220d28ba361","ssdeep":"1536:dRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKLU0Ab:lHNwcv9VBQpLl88SMBQ47GKIF","tlshash":"7183e7df77ca702247ab20ba407f550bf276199d684d4400f159d8e9bc78a4a823bf7e","first_seen":"2026-09-20T08:50:25.297887Z","last_seen":"2026-09-20T08:50:25.297887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"code.jqueryoss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bjhxzc.cn/","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T08:49:49.433Z","timestamp":1789894189433,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bjhxzc.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T10:41:54.381069Z","times_seen":18566567,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bjhxzc.cn/","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"154.218.170.177","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T08:49:49.836Z","timestamp":1789894189836,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bjhxzc.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:50 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Length: 273\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":343,"size_decoded":547,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (343), with no line terminators","md5":"bff0fd40b7fad0287430825e7505b46d","sha1":"857621bb56f7c331b719024395a4602e2c5af3b3","sha256":"2e91ad0a80fb4c0d7baa6a18aff73c947b0d845aea4321cbc55e4c7da05d0eed","sha512":"6634156b4de66671aec4c3713685bf7a825e2e40972a603cbef2e20ff252fe362b8e4b1bd66fd82fa0b175bd8b0ccb3d97c0c21d4cfa340b07e636a55a8f64e5","ssdeep":"","tlshash":"44e07dd97e06e93467400ce6d1b9f94d7f2b34388d29c815c5ddc8086634fde0c75924","first_seen":"2026-07-19T09:18:59.386735Z","last_seen":"2026-09-20T08:50:25.304942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":3,"connect":142,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/static/picture/kaiyun.png","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.035Z","timestamp":1789894191035,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/kaiyun.png HTTP/1.1\r\nHost: 154.218.174.168\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/pc.php\r\nCookie: hasVisited178a=1\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:51 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 02 Apr 2024 12:20:01 GMT\r\nETag: \"5ce3-6151c20091e40\"\r\nAccept-Ranges: bytes\r\nContent-Length: 23779\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":23779,"size_decoded":24089,"mime_type":"image/png","magic":"PNG image data, 918 x 220, 8-bit colormap, non-interlaced","md5":"5ac1aae1401f4abd5ab81f8741e44ee9","sha1":"67e8bdf179f4b0fda1c1e3f5ddccaed51dd961ca","sha256":"bbf1492b152a535d42b16c0c3b2dde9de8aa5b0afea11d2beefcd7c9aef066e0","sha512":"c980dbd1ba1be523005e86acd2e95b865ad316d3d80e281a9912cbd52ea9e8715fb5832e807df82d666c48d034717ab09c50f4f1e874ea6db32f060c0367f9ed","ssdeep":"384:5L9pV1iRPAoh05oYNOy5j+ogRQUJ8QrZ/Hi2uu/KmJa52QUmZJbk:FtMRPAohoBNOy5j+ogRHJ8QrZ/Hi2v/p","tlshash":"35b2e057c984c8a26fbc9113a005debdd5670d04cb35ae503be2323f5fb261a1df6292","first_seen":"2023-06-05T20:28:18Z","last_seen":"2026-09-20T08:50:25.307062Z","times_seen":393,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":273,"dns":0,"connect":143,"send":0,"wait":287,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"154.218.174.168/static/picture/jy1.png","fqdn":"154.218.174.168","domain":"154.218.174.168","tld":""},"ip":{"addr":"154.218.174.168","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://154.218.174.168/pc.php","date":"2026-09-20T08:49:51.039Z","timestamp":1789894191039,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /static/picture/jy1.png HTTP/1.1\r\nHost: 154.218.174.168\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://154.218.174.168/pc.php\r\nCookie: hasVisited178a=1\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:51 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 02 Apr 2024 12:20:00 GMT\r\nETag: \"f44d-6151c1ff9dc00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 62541\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":62541,"size_decoded":62851,"mime_type":"image/png","magic":"PNG image data, 918 x 220, 8-bit/color RGBA, non-interlaced","md5":"dbebb8da9fe8fa1f603761cd7924c89b","sha1":"53e77c74152e66387b4ae7164c110b043e32d117","sha256":"70805887f90c05c5c21c9955386f0d3f186fb4fc4a723ce1fee22a138c76607b","sha512":"5a389b2a24bda766bd65911ed255315c443860c9df84ddf4ddf0ea59718c35710dc1164e68b023d3820465d5edfe474003a87b5b17ab0edf39081bded56a5c1f","ssdeep":"1536:4cZGeoPM4tGjTA+WbKTFr7wmhH5TRSx5Ca/yQfT9R:l4jPXtGjTATWRd3NSxIa/Vrn","tlshash":"2553f138baa5a42a5585cca1f494af1291b5b3d4b0efa9483240bf97e321e23dc54f58","first_seen":"2024-04-24T16:51:12Z","last_seen":"2026-09-20T08:50:25.309805Z","times_seen":291,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":272,"dns":0,"connect":143,"send":0,"wait":287,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.bjhxzc.cn/tz.js","fqdn":"www.bjhxzc.cn","domain":"bjhxzc.cn","tld":"cn"},"ip":{"addr":"154.218.170.177","port":80,"asn":137951,"as":"ASLINE LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bjhxzc.cn/","date":"2026-09-20T08:49:50.390Z","timestamp":1789894190390,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /tz.js HTTP/1.1\r\nHost: www.bjhxzc.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.bjhxzc.cn/\r\nCookie: hasVisited178a=1\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 20 Sep 2026 08:49:50 GMT\r\nServer: Apache\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Thu, 16 Jul 2026 03:08:04 GMT\r\nETag: \"539-656b1bfa5538d-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nSet-Cookie: hasVisited178a=1; Max-Age=86400; Path=/\r\nContent-Length: 742\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":[{"name":"hasVisited178a","value":"1","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"hasVisited178a=1; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1337,"size_decoded":1107,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"17c82183f03b379c3f6f46bd675cc639","sha1":"21eac8b42382e608578a2b8a0fb275a77f931383","sha256":"61f6ba061d5c9f4252cf89d58bc2a99145f5915dc3062931eebf31e5025ad174","sha512":"15e0b63c9b9823cf94fd5f3f43f0df6f1b1e8a6068edc1e21146d6b2213f4721a9e40745054cca7eadc712f9986f22271454210373424bb8fcb82756234eee66","ssdeep":"","tlshash":"e521207f0d6298289326a41e707689c834f4902a3a20c901f4fcfd556fb8f54587e7c8","first_seen":"2026-07-19T09:18:59.389525Z","last_seen":"2026-09-20T08:50:25.312096Z","times_seen":2,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":149,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jqueryoss.com/ajax/libs/jquery/3.8.1/jquery.min.js","fqdn":"code.jqueryoss.com","domain":"jqueryoss.com","tld":"com"},"ip":{"addr":"45.150.167.82","port":443,"asn":201106,"as":"Spartan Host Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.bjhxzc.cn/","date":"2026-09-20T08:49:50.392Z","timestamp":1789894190392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jqueryoss.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 01:47:29 GMT","end":"Wed, 09 Dec 2026 01:47:28 GMT"},"fingerprint":{"sha1":"95:C8:39:C5:DA:7C:17:5A:AD:C3:65:9B:8B:37:C5:0C:4B:D6:43:A9","sha256":"82:49:AD:50:B3:5D:A5:F5:D1:6E:08:8A:69:85:A5:11:D2:2F:57:B6:9E:EF:F0:2E:C9:61:B8:AE:6E:05:5B:81"}}},"request":{"raw":"GET /ajax/libs/jquery/3.8.1/jquery.min.js HTTP/1.1\r\nHost: code.jqueryoss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.bjhxzc.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 08:49:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Aug 2026 07:51:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a82bd8d-1589d\"\r\nset-cookie: server_session_2b1bbc3f=557b1900d52e6dc08a3c0fc5c08f9f96; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400, quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nserver: nginx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_2b1bbc3f","value":"557b1900d52e6dc08a3c0fc5c08f9f96","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_2b1bbc3f=557b1900d52e6dc08a3c0fc5c08f9f96; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88221,"size_decoded":31464,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"1d19a0a5fe2e8cae17220c9d68203007","sha1":"a4865fea2ea2eb81fc37bf2376d76d8628c5dbdd","sha256":"64145c6d6a833aa9ecea3fa1743fc7beeba85df181d71d96f13b8687a04c67e9","sha512":"f99623de6ebabcb512d38e72ad529538e5b87dcf2687e27bf54839fd1192de07694705572cadfd610887049286da074fe96e36edc9ba3da5d9b13220d28ba361","ssdeep":"1536:dRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKLU0Ab:lHNwcv9VBQpLl88SMBQ47GKIF","tlshash":"7183e7df77ca702247ab20ba407f550bf276199d684d4400f159d8e9bc78a4a823bf7e","first_seen":"2026-09-20T08:50:25.297887Z","last_seen":"2026-09-20T08:50:25.297887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1713,"timings":{"blocked":-1,"dns":196,"connect":176,"send":0,"wait":987,"receive":0,"ssl":353},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"code.jqueryoss.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}