{"report_id":"40a8db80-24bd-45d3-9324-64ee8dc8c86d","version":6,"status":"done","tags":[],"date":"2026-01-04T15:24:07Z","url":{"schema":"http","addr":"admin.content-deepgtp.top","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"title":"Coinbase后台","dom":{"size":231368,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60937)","md5":"8d44368fda663d749f50cc85228b8f34","sha1":"108dac4a59ca86c17b09bb38cd8a3fa5118ff936","sha256":"093b4c41faf6e22f2e80c13f40d086e0cc6a529d1117f7175084d5341365016a","sha512":"66203979a615ee1d60b6ee27d1904c47a98645cdfe8203c81e8f7f4f1e758d4e1863486df9aecaa53ab6531af5cc5eb9ede37f02c73be4c1a8e1498992caad0e","ssdeep":"3072:GOdYRaqu9U2U41POELxYcIMdH6YgkYq2+b0vcUnSNtD2vGizj+3NDOH4CW:k2ejs2vGizjc","tlshash":"ca34c6e49264e6e8c8058ecbebe9fb59245f31f7bcb15434b3ac49574b220dc4b8d846","dom_hash":"domhash83a1c032373b6234b35ed48cb5181930","first_seen":"2026-01-04T15:24:18.361202Z","last_seen":"2026-01-24T11:11:20.2465Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"admin.content-deepgtp.top","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T15:24:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-04T15:23:46Z","timestamp":1767540226,"ip_dst":{"addr":"172.18.0.12","port":57642,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 25","source":"{\"timestamp\":\"2026-01-04T15:23:46.201240+0000\",\"flow_id\":318160540605727,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"134.122.140.226\",\"src_port\":443,\"dest_ip\":\"172.18.0.12\",\"dest_port\":57642,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400024,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 25\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-01-04T15:23:45.924959+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"admin.content-deepgtp.top","ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":66,"request_count":22,"received_data":4466174,"sent_data":12112,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-elementUI.59d0bd7e.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"1df6e92969457cfb52c2da99249ba762","sha1":"741ef5c8a2611beaf7030e158665904fa76dc04f","sha256":"44ebcdb90242cfb91d05821e5d810339c4f284f5a892f507c7d93963b9110717","sha512":"8bf709fe125566efbdc85f487e035e3f3f56a8da85fe5d0b7b46c58870e8b8c8cc4bd7c180a5f7989934185a906c1c426372fdde3b6e1d5d50c4458187ac7f5c","ssdeep":"12288:hEW5fInAN/8GEi/PZh8Uz8CETGZPsZvFX:hXZQANQUz8CIGZPsZvFX","tlshash":"dbe41a8d72c5b5714ba360b0102f250bb33b1d9ca40980dcb6b9d9ea6d7d909522ff7d","size":702664,"data":"","first_seen":"2025-11-29T03:25:17.720051Z","last_seen":"2026-01-24T12:38:41.293148Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-ec680b3e.fe3e85ba.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"15301f33f01035d1855cc5441cba76cc","sha1":"019e7a21b406933c0bf8f3970c0a4ddd90080875","sha256":"e80ea19d80f38e1f2571f6a848374bcc95ef10bfbd4f907477a330a340500d4a","sha512":"ad15d829f5aed033ba2671cd3ee96aa51de01ef0258143f5cc26283582a1132fb8a4f68985b8955ab3896b972fa73dc732d9e186a6d57084ecdb1b77c3d2d308","ssdeep":"192:ynsiBFJ58WdL7hiJ0rTRsEq1vvureg7spppB4SBalho9Slq+zSamdFHb/V8yhu0:yskXldLo+rTHqVtg7sfN6XSx7HrOyhD","tlshash":"fd820945316ae8ae4c55d2f6645e2380a1276cc8a942f1ecf7b4ece06584d48733fbbc","size":19216,"data":"","first_seen":"2026-01-04T15:24:18.367204Z","last_seen":"2026-01-24T12:38:41.286256Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"707387764370bcfb94f47ca6bce036d3","sha1":"251ced5312a47995dfaf45a2059f8bee43da1c08","sha256":"09ddd01e5658559c2b60ce55f3c6d4a82a4997f389cba9083fe4d7b36613bb93","sha512":"55c3bfd7217054b37e037c4cb44441001138cf50a8ef3d317da65ae148bf544983a377a7a4d93c1b0967feb44f1a8fc633eab0ee79f5a77c5252c835faa44ed4","ssdeep":"768:wcs3slo3n6+hROnP+KWyYTz+fYZdYUJpFLd1zZxH8dVDurFUD3zWAH4nCZerrDdu:A3sm3Nlpf/pp8LC7AH4CuvSJR","tlshash":"45233db2d398f9788b96ad272655fb73508b66732c30777443ac927163905f8138bc4b","size":46663,"data":"","first_seen":"2026-01-04T15:24:18.375003Z","last_seen":"2026-01-24T12:38:41.296412Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-elementUI.59d0bd7e.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"1df6e92969457cfb52c2da99249ba762","sha1":"741ef5c8a2611beaf7030e158665904fa76dc04f","sha256":"44ebcdb90242cfb91d05821e5d810339c4f284f5a892f507c7d93963b9110717","sha512":"8bf709fe125566efbdc85f487e035e3f3f56a8da85fe5d0b7b46c58870e8b8c8cc4bd7c180a5f7989934185a906c1c426372fdde3b6e1d5d50c4458187ac7f5c","ssdeep":"12288:hEW5fInAN/8GEi/PZh8Uz8CETGZPsZvFX:hXZQANQUz8CIGZPsZvFX","tlshash":"dbe41a8d72c5b5714ba360b0102f250bb33b1d9ca40980dcb6b9d9ea6d7d909522ff7d","size":702664,"data":"","first_seen":"2025-11-29T03:25:17.720051Z","last_seen":"2026-01-24T12:38:41.293148Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/app.7464ff5d.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"1851c88307acbfac5ba9cc1ccae222bf","sha1":"b65e315e4d36184ba7cc72dcaf9b92b2936eb08c","sha256":"463d407a2c500fcc049b7ea4e49377d4fe29edb855544e3c0b8ac53134660772","sha512":"2b61bbbe9453b12433429f7f7e3fc826567d47d5abbe5f5f022f6ee14137c3620fb033620e1365e7d44f88516925ecf5cf946f79b0606f7f6f5c790fb53f8b71","ssdeep":"3072:ZrIoAflot3EW5oRv5EM/MPMqLn7j/rz3wFToZQc402Z:5oRREM/MPMqLnHzz3wFTqM","tlshash":"d5645ca462b490b8c92ed1cef6fdaa497c5f35e738d140a0f3bc59c71b7289c0a9d509","size":313951,"data":"","first_seen":"2026-01-04T15:24:18.37296Z","last_seen":"2026-01-24T12:38:41.291817Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-libs.8d48badf.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"7591e011a93fe1a1b4009707594ce4d7","sha1":"ef9ee852050d7842fe7c70e07f9b18a18f7e09eb","sha256":"d8d6ee2cfca4a827a71b7fb37d3006f088bd136871234601522a52e877a18045","sha512":"d7098d25bd835aed281663b7e33aa734f37daee13363d14165a79eaebe605f7e844f1c7be066b9853b714be60a4de87c71c8a2f872cc5535dda2ca10d506697d","ssdeep":"12288:CPcmYopyzHt7209x/CJVynHVi5L3Lihcv:eHyDt7209x/CJAH4B3A+","tlshash":"e4e4088db296b47507a760b4003f110ff2372a59640ec0e4f275e9e5acb895ea16bf7c","size":696407,"data":"","first_seen":"2025-11-29T03:25:17.705085Z","last_seen":"2026-01-24T12:38:41.283714Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/app.7464ff5d.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"1851c88307acbfac5ba9cc1ccae222bf","sha1":"b65e315e4d36184ba7cc72dcaf9b92b2936eb08c","sha256":"463d407a2c500fcc049b7ea4e49377d4fe29edb855544e3c0b8ac53134660772","sha512":"2b61bbbe9453b12433429f7f7e3fc826567d47d5abbe5f5f022f6ee14137c3620fb033620e1365e7d44f88516925ecf5cf946f79b0606f7f6f5c790fb53f8b71","ssdeep":"3072:ZrIoAflot3EW5oRv5EM/MPMqLn7j/rz3wFToZQc402Z:5oRREM/MPMqLnHzz3wFTqM","tlshash":"d5645ca462b490b8c92ed1cef6fdaa497c5f35e738d140a0f3bc59c71b7289c0a9d509","size":313951,"data":"","first_seen":"2026-01-04T15:24:18.37296Z","last_seen":"2026-01-24T12:38:41.291817Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-libs.8d48badf.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"7591e011a93fe1a1b4009707594ce4d7","sha1":"ef9ee852050d7842fe7c70e07f9b18a18f7e09eb","sha256":"d8d6ee2cfca4a827a71b7fb37d3006f088bd136871234601522a52e877a18045","sha512":"d7098d25bd835aed281663b7e33aa734f37daee13363d14165a79eaebe605f7e844f1c7be066b9853b714be60a4de87c71c8a2f872cc5535dda2ca10d506697d","ssdeep":"12288:CPcmYopyzHt7209x/CJVynHVi5L3Lihcv:eHyDt7209x/CJAH4B3A+","tlshash":"e4e4088db296b47507a760b4003f110ff2372a59640ec0e4f275e9e5acb895ea16bf7c","size":696407,"data":"","first_seen":"2025-11-29T03:25:17.705085Z","last_seen":"2026-01-24T12:38:41.283714Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-ec680b3e.fe3e85ba.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"15301f33f01035d1855cc5441cba76cc","sha1":"019e7a21b406933c0bf8f3970c0a4ddd90080875","sha256":"e80ea19d80f38e1f2571f6a848374bcc95ef10bfbd4f907477a330a340500d4a","sha512":"ad15d829f5aed033ba2671cd3ee96aa51de01ef0258143f5cc26283582a1132fb8a4f68985b8955ab3896b972fa73dc732d9e186a6d57084ecdb1b77c3d2d308","ssdeep":"192:ynsiBFJ58WdL7hiJ0rTRsEq1vvureg7spppB4SBalho9Slq+zSamdFHb/V8yhu0:yskXldLo+rTHqVtg7sfN6XSx7HrOyhD","tlshash":"fd820945316ae8ae4c55d2f6645e2380a1276cc8a942f1ecf7b4ece06584d48733fbbc","size":19216,"data":"","first_seen":"2026-01-04T15:24:18.367204Z","last_seen":"2026-01-24T12:38:41.286256Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"707387764370bcfb94f47ca6bce036d3","sha1":"251ced5312a47995dfaf45a2059f8bee43da1c08","sha256":"09ddd01e5658559c2b60ce55f3c6d4a82a4997f389cba9083fe4d7b36613bb93","sha512":"55c3bfd7217054b37e037c4cb44441001138cf50a8ef3d317da65ae148bf544983a377a7a4d93c1b0967feb44f1a8fc633eab0ee79f5a77c5252c835faa44ed4","ssdeep":"768:wcs3slo3n6+hROnP+KWyYTz+fYZdYUJpFLd1zZxH8dVDurFUD3zWAH4nCZerrDdu:A3sm3Nlpf/pp8LC7AH4CuvSJR","tlshash":"45233db2d398f9788b96ad272655fb73508b66732c30777443ac927163905f8138bc4b","size":46663,"data":"","first_seen":"2026-01-04T15:24:18.375003Z","last_seen":"2026-01-24T12:38:41.296412Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/css/chunk-libs.7dc414e8.css","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:47.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/css/chunk-libs.7dc414e8.css HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-faf8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64231), with no line terminators","md5":"390c40b536161f5bfc43f77099f33d0f","sha1":"0f94b72ed2ba5028268a30ae40ebbecee96e535e","sha256":"adc85ef43426dd2daa60f406c2c6d9a9a745b728297765724b8971ea897044d5","sha512":"622dd7484c107fc6f223b0c4f5c42903d18043edf5ac26298f783bc926c99c55a8649041d19f91c0f850198eed90ea2dec38602f6707a48f39ca85ce87c3c70e","ssdeep":"768:Vr43yXrO4dgTlfy1oBG1b8KWgt01js3TY6hx3bNCp:VTXKh+xA+0ls306hx32","tlshash":"3f5362226e6f1839f423dd6569c066bd3a24b113cf0382b6f97536248ac635e1f3b60c","first_seen":"2025-11-29T03:25:17.702665Z","last_seen":"2026-01-24T12:38:41.290729Z","times_seen":4,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/fonts/element-icons.535877f5.woff","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:49.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/static/css/app.77cb4c5c.css\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:49 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Mon, 01 Dec 2025 13:05:15 GMT\r\netag: \"692d928b-6e28\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-08-08T21:30:42.888147Z","times_seen":29361,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":332,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/css/chunk-ec680b3e.62451170.css","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:53.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/css/chunk-ec680b3e.62451170.css HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-e535\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58677,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58677), with no line terminators","md5":"0e266e49c89419bee0621fd191210f42","sha1":"a88880421e399a24e6ce7008dce2a0d9f1c4f3a0","sha256":"59adc52cffe99fd9a79bcfa2e979f68de6c8df15204aab52560806a301037bc6","sha512":"a48a3cee83ec3bf010fd533747b636922bf84b94f9dd59eb60d763c185de7e7224e7a2f8a39f53b59f91acfbf85926773e9b9342e9de859beb2098722f089829","ssdeep":"1536:umQu8vPUNgz9DkQl+LZ6RVov5vn2AVLMr8F/1:wu8nOO9DAIw5PHGq","tlshash":"b643d0357a8d2818fa27d501e4b1d5a8dd295363c20e893fa45cb02ec9776d738bcfa4","first_seen":"2026-01-04T15:24:18.364283Z","last_seen":"2026-01-24T12:38:41.285133Z","times_seen":3,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/api/sys/menu/nav?t=1767540229179\u0026appType=1","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:49.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /api/sys/menu/nav?t=1767540229179\u0026appType=1 HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: null\r\nSign: 0320FE60F91036BF0C6600D9882B749E\r\nSystemrandom: 1767540229213941\r\nTissuepaper: 1767540229\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:49 GMT\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 106\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9fc6d24cfdae51671204d08f37007f1a","sha1":"4f9a54b6f95756e80d3b9d320a2e896fc5c49d39","sha256":"e8c397ae1ec938ae79380b3d7388092480a2ccda340d68ed0d207a903f3bf00e","sha512":"823f52666258aafed62a8b04c715961b22ac8fd1befcb4890b073057de92fb0aee2f376b94bbd5d1b0c76cf7dfae3a86a43bda990fac67a8662482be2b7cea28","ssdeep":"","tlshash":"97b01202071606cf1003b43c024d933c00c8856f400f4db59dbec938e7a2080d131136","first_seen":"2026-01-04T15:24:18.365233Z","last_seen":"2026-01-24T12:38:41.294203Z","times_seen":3,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/favicon.ico","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:49.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:49 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 41815\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\netag: \"692d928c-a357\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41815,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 320 x 320, 8-bit/color RGB, non-interlaced","md5":"8682050b0989e673b2f9b5ca61038a6f","sha1":"052860d84e2f472dba1289d0f403a4ebdcb6bc7d","sha256":"24ec6a8c1ffa920aa04fb14ec968dd049680311d353fb0e169316bf1577337a0","sha512":"41ddc75d5d94e62e05775585d5f78ec66255df2de058712c88a56a5244c7da905592d4131c72bb64e2bb355f09575a23f4d51adf8e7a2f4e9b3af0c80527bdd0","ssdeep":"768:I5Ml7nV2lgFyp8BhdF7WvypYZ1BFI09xs1PqAqknnZIk:I5MBn8lgFyp2lWhL3/mqAq8Zp","tlshash":"0013f2d62349d3bd97143b5f6dfe93b39720c296c20a8431f62f49727481f4da511c96","first_seen":"2026-01-04T15:24:18.36634Z","last_seen":"2026-01-24T12:38:41.288445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/css/chunk-ec680b3e.62451170.css","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:49.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/css/chunk-ec680b3e.62451170.css HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-e535\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58677,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58677), with no line terminators","md5":"0e266e49c89419bee0621fd191210f42","sha1":"a88880421e399a24e6ce7008dce2a0d9f1c4f3a0","sha256":"59adc52cffe99fd9a79bcfa2e979f68de6c8df15204aab52560806a301037bc6","sha512":"a48a3cee83ec3bf010fd533747b636922bf84b94f9dd59eb60d763c185de7e7224e7a2f8a39f53b59f91acfbf85926773e9b9342e9de859beb2098722f089829","ssdeep":"1536:umQu8vPUNgz9DkQl+LZ6RVov5vn2AVLMr8F/1:wu8nOO9DAIw5PHGq","tlshash":"b643d0357a8d2818fa27d501e4b1d5a8dd295363c20e893fa45cb02ec9776d738bcfa4","first_seen":"2026-01-04T15:24:18.364283Z","last_seen":"2026-01-24T12:38:41.285133Z","times_seen":3,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-ec680b3e.fe3e85ba.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:49.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/chunk-ec680b3e.fe3e85ba.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-4b36\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18910), with no line terminators","md5":"15301f33f01035d1855cc5441cba76cc","sha1":"019e7a21b406933c0bf8f3970c0a4ddd90080875","sha256":"e80ea19d80f38e1f2571f6a848374bcc95ef10bfbd4f907477a330a340500d4a","sha512":"ad15d829f5aed033ba2671cd3ee96aa51de01ef0258143f5cc26283582a1132fb8a4f68985b8955ab3896b972fa73dc732d9e186a6d57084ecdb1b77c3d2d308","ssdeep":"192:ynsiBFJ58WdL7hiJ0rTRsEq1vvureg7spppB4SBalho9Slq+zSamdFHb/V8yhu0:yskXldLo+rTHqVtg7sfN6XSx7HrOyhD","tlshash":"fd820945316ae8ae4c55d2f6645e2380a1276cc8a942f1ecf7b4ece06584d48733fbbc","first_seen":"2026-01-04T15:24:18.367204Z","last_seen":"2026-01-24T12:38:41.286256Z","times_seen":3,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:23:51.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /?account=\u0026password=\u0026google= HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-ba90\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47760,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47752), with no line terminators","md5":"ed6b271765ad54e44bf8f9a45d615bf8","sha1":"54c7f70bf4049be3653034a7138307deab2a59df","sha256":"209ca64bd831749e1d8addbe2733d0ba64e5ac7ca804c287b88b0d72341814ff","sha512":"0630e011b3628bd817e5febe3dd3cf0666bd8f5e0150f9b96378434dd9e9c6c8d7541c83a6464d4ce646a0e07ee4c619e026d2c61635af551050c76da2633401","ssdeep":"768:ycs3slo3n6+hROnP+KWyYTz+fYZdYUJpFLd1zZxH8dVDurFUD3zWAH4nCZerrDdD:q3sm3Nlpf/pp8LC7AH4CuvSJq","tlshash":"aa235fb2d398f9788ba2ad272a55fb73508b66732c30777443ad927163905f4138bc4b","first_seen":"2026-01-04T15:24:18.368141Z","last_seen":"2026-01-24T12:38:41.289673Z","times_seen":3,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/favicon.ico","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:54.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:54 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 41815\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\netag: \"692d928c-a357\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41815,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 320 x 320, 8-bit/color RGB, non-interlaced","md5":"8682050b0989e673b2f9b5ca61038a6f","sha1":"052860d84e2f472dba1289d0f403a4ebdcb6bc7d","sha256":"24ec6a8c1ffa920aa04fb14ec968dd049680311d353fb0e169316bf1577337a0","sha512":"41ddc75d5d94e62e05775585d5f78ec66255df2de058712c88a56a5244c7da905592d4131c72bb64e2bb355f09575a23f4d51adf8e7a2f4e9b3af0c80527bdd0","ssdeep":"768:I5Ml7nV2lgFyp8BhdF7WvypYZ1BFI09xs1PqAqknnZIk:I5MBn8lgFyp2lWhL3/mqAq8Zp","tlshash":"0013f2d62349d3bd97143b5f6dfe93b39720c296c20a8431f62f49727481f4da511c96","first_seen":"2026-01-04T15:24:18.36634Z","last_seen":"2026-01-24T12:38:41.288445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/img/logo.8682050b.png","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:54.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/img/logo.8682050b.png HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 13:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928b-a357\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGB, non-interlaced","md5":"8682050b0989e673b2f9b5ca61038a6f","sha1":"052860d84e2f472dba1289d0f403a4ebdcb6bc7d","sha256":"24ec6a8c1ffa920aa04fb14ec968dd049680311d353fb0e169316bf1577337a0","sha512":"41ddc75d5d94e62e05775585d5f78ec66255df2de058712c88a56a5244c7da905592d4131c72bb64e2bb355f09575a23f4d51adf8e7a2f4e9b3af0c80527bdd0","ssdeep":"768:I5Ml7nV2lgFyp8BhdF7WvypYZ1BFI09xs1PqAqknnZIk:I5MBn8lgFyp2lWhL3/mqAq8Zp","tlshash":"0013f2d62349d3bd97143b5f6dfe93b39720c296c20a8431f62f49727481f4da511c96","first_seen":"2026-01-04T15:24:18.36634Z","last_seen":"2026-01-24T12:38:41.288445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:23:45.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-ba90\"\r\nset-cookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47760,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47752), with no line terminators","md5":"ed6b271765ad54e44bf8f9a45d615bf8","sha1":"54c7f70bf4049be3653034a7138307deab2a59df","sha256":"209ca64bd831749e1d8addbe2733d0ba64e5ac7ca804c287b88b0d72341814ff","sha512":"0630e011b3628bd817e5febe3dd3cf0666bd8f5e0150f9b96378434dd9e9c6c8d7541c83a6464d4ce646a0e07ee4c619e026d2c61635af551050c76da2633401","ssdeep":"768:ycs3slo3n6+hROnP+KWyYTz+fYZdYUJpFLd1zZxH8dVDurFUD3zWAH4nCZerrDdD:q3sm3Nlpf/pp8LC7AH4CuvSJq","tlshash":"aa235fb2d398f9788ba2ad272a55fb73508b66732c30777443ad927163905f4138bc4b","first_seen":"2026-01-04T15:24:18.368141Z","last_seen":"2026-01-24T12:38:41.289673Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2661,"timings":{"blocked":1049,"dns":488,"connect":276,"send":0,"wait":561,"receive":0,"ssl":282},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-libs.8d48badf.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:47.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/chunk-libs.8d48badf.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-aa057\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":696407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21484)","md5":"7591e011a93fe1a1b4009707594ce4d7","sha1":"ef9ee852050d7842fe7c70e07f9b18a18f7e09eb","sha256":"d8d6ee2cfca4a827a71b7fb37d3006f088bd136871234601522a52e877a18045","sha512":"d7098d25bd835aed281663b7e33aa734f37daee13363d14165a79eaebe605f7e844f1c7be066b9853b714be60a4de87c71c8a2f872cc5535dda2ca10d506697d","ssdeep":"12288:CPcmYopyzHt7209x/CJVynHVi5L3Lihcv:eHyDt7209x/CJAH4B3A+","tlshash":"e4e4088db296b47507a760b4003f110ff2372a59640ec0e4f275e9e5acb895ea16bf7c","first_seen":"2025-11-29T03:25:17.705085Z","last_seen":"2026-01-24T12:38:41.283714Z","times_seen":4,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/css/app.77cb4c5c.css","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:51.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/css/app.77cb4c5c.css HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 13:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928b-377b9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6a9b6304d9fcdbb807d1149c6a4e283c","sha1":"70acb68a1bac424dd41cdc488f72964b70e3c75c","sha256":"73471544e78dfb4287e52d2bf1e0c616df3bbe703cf7dd127410e29f1afd0e07","sha512":"a5a79778a91d7b65fe4b11bf453edccc200aab00c26075783525ec355c48175b51b383e23007a77852d12182e390d6d29e282417bee7a8f4ee2131d875227ec0","ssdeep":"1536:Q28MoCURKEW4YGWt0A1u9wkFmp0gWtMEYKob0O6iZkJWYu8euEWIksRrIcmG9XPD:WSJKoe+yGlgnGz1","tlshash":"d724b511db1b243b622bd66d74c0ba886f18c323d9725b2bfd95741ccae64891263f1f","first_seen":"2026-01-04T15:24:18.370552Z","last_seen":"2026-01-24T12:38:41.295258Z","times_seen":3,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-libs.8d48badf.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:51.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/chunk-libs.8d48badf.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-aa057\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696407,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21484)","md5":"7591e011a93fe1a1b4009707594ce4d7","sha1":"ef9ee852050d7842fe7c70e07f9b18a18f7e09eb","sha256":"d8d6ee2cfca4a827a71b7fb37d3006f088bd136871234601522a52e877a18045","sha512":"d7098d25bd835aed281663b7e33aa734f37daee13363d14165a79eaebe605f7e844f1c7be066b9853b714be60a4de87c71c8a2f872cc5535dda2ca10d506697d","ssdeep":"12288:CPcmYopyzHt7209x/CJVynHVi5L3Lihcv:eHyDt7209x/CJAH4B3A+","tlshash":"e4e4088db296b47507a760b4003f110ff2372a59640ec0e4f275e9e5acb895ea16bf7c","first_seen":"2025-11-29T03:25:17.705085Z","last_seen":"2026-01-24T12:38:41.283714Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-elementUI.59d0bd7e.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:51.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/chunk-elementUI.59d0bd7e.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-ab8c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":702664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"6e0fc24de4b2510949be931541496dd7","sha1":"d701262c9c0e690eea9e02eea716c787e63612dd","sha256":"2232c9e9bd91c43c3e52344a966881e84c8707889d3632ed2c3342bf90148add","sha512":"1cce7465db9a306314edc98dfeed245ea5ddb741badf9824c840f6bbb1fb2faf160d5d87159becc59252cccc5fd331288f288b9a4a61eb370c4f2c78ffc01c12","ssdeep":"12288:hEW5fInAN/8GEi/PZh8Uz8QETGZPsZvFX:hXZQANQUz8QIGZPsZvFX","tlshash":"85e41a8d72c5b5714ba360b0102f250bb33b1d9ca40980dcb6b9d9ea6dbd909522ff7d","first_seen":"2026-01-04T15:24:18.371918Z","last_seen":"2026-01-04T15:24:18.371918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/css/app.77cb4c5c.css","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:47.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/css/app.77cb4c5c.css HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 13:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928b-377b9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227257,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6a9b6304d9fcdbb807d1149c6a4e283c","sha1":"70acb68a1bac424dd41cdc488f72964b70e3c75c","sha256":"73471544e78dfb4287e52d2bf1e0c616df3bbe703cf7dd127410e29f1afd0e07","sha512":"a5a79778a91d7b65fe4b11bf453edccc200aab00c26075783525ec355c48175b51b383e23007a77852d12182e390d6d29e282417bee7a8f4ee2131d875227ec0","ssdeep":"1536:Q28MoCURKEW4YGWt0A1u9wkFmp0gWtMEYKob0O6iZkJWYu8euEWIksRrIcmG9XPD:WSJKoe+yGlgnGz1","tlshash":"d724b511db1b243b622bd66d74c0ba886f18c323d9725b2bfd95741ccae64891263f1f","first_seen":"2026-01-04T15:24:18.370552Z","last_seen":"2026-01-24T12:38:41.295258Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/app.7464ff5d.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:47.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/app.7464ff5d.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928b-4ca5f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":313951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65476), with no line terminators","md5":"1851c88307acbfac5ba9cc1ccae222bf","sha1":"b65e315e4d36184ba7cc72dcaf9b92b2936eb08c","sha256":"463d407a2c500fcc049b7ea4e49377d4fe29edb855544e3c0b8ac53134660772","sha512":"2b61bbbe9453b12433429f7f7e3fc826567d47d5abbe5f5f022f6ee14137c3620fb033620e1365e7d44f88516925ecf5cf946f79b0606f7f6f5c790fb53f8b71","ssdeep":"3072:ZrIoAflot3EW5oRv5EM/MPMqLn7j/rz3wFToZQc402Z:5oRREM/MPMqLnHzz3wFTqM","tlshash":"d5645ca462b490b8c92ed1cef6fdaa497c5f35e738d140a0f3bc59c71b7289c0a9d509","first_seen":"2026-01-04T15:24:18.37296Z","last_seen":"2026-01-24T12:38:41.291817Z","times_seen":3,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-elementUI.59d0bd7e.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:47.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/chunk-elementUI.59d0bd7e.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-ab8c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":702664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"1df6e92969457cfb52c2da99249ba762","sha1":"741ef5c8a2611beaf7030e158665904fa76dc04f","sha256":"44ebcdb90242cfb91d05821e5d810339c4f284f5a892f507c7d93963b9110717","sha512":"8bf709fe125566efbdc85f487e035e3f3f56a8da85fe5d0b7b46c58870e8b8c8cc4bd7c180a5f7989934185a906c1c426372fdde3b6e1d5d50c4458187ac7f5c","ssdeep":"12288:hEW5fInAN/8GEi/PZh8Uz8CETGZPsZvFX:hXZQANQUz8CIGZPsZvFX","tlshash":"dbe41a8d72c5b5714ba360b0102f250bb33b1d9ca40980dcb6b9d9ea6d7d909522ff7d","first_seen":"2025-11-29T03:25:17.720051Z","last_seen":"2026-01-24T12:38:41.293148Z","times_seen":4,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/img/logo.8682050b.png","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin.content-deepgtp.top/","date":"2026-01-04T15:23:49.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/img/logo.8682050b.png HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 01 Dec 2025 13:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928b-a357\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGB, non-interlaced","md5":"8682050b0989e673b2f9b5ca61038a6f","sha1":"052860d84e2f472dba1289d0f403a4ebdcb6bc7d","sha256":"24ec6a8c1ffa920aa04fb14ec968dd049680311d353fb0e169316bf1577337a0","sha512":"41ddc75d5d94e62e05775585d5f78ec66255df2de058712c88a56a5244c7da905592d4131c72bb64e2bb355f09575a23f4d51adf8e7a2f4e9b3af0c80527bdd0","ssdeep":"768:I5Ml7nV2lgFyp8BhdF7WvypYZ1BFI09xs1PqAqknnZIk:I5MBn8lgFyp2lWhL3/mqAq8Zp","tlshash":"0013f2d62349d3bd97143b5f6dfe93b39720c296c20a8431f62f49727481f4da511c96","first_seen":"2026-01-04T15:24:18.36634Z","last_seen":"2026-01-24T12:38:41.288445Z","times_seen":3,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/css/chunk-libs.7dc414e8.css","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:51.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/css/chunk-libs.7dc414e8.css HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-faf8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64231), with no line terminators","md5":"390c40b536161f5bfc43f77099f33d0f","sha1":"0f94b72ed2ba5028268a30ae40ebbecee96e535e","sha256":"adc85ef43426dd2daa60f406c2c6d9a9a745b728297765724b8971ea897044d5","sha512":"622dd7484c107fc6f223b0c4f5c42903d18043edf5ac26298f783bc926c99c55a8649041d19f91c0f850198eed90ea2dec38602f6707a48f39ca85ce87c3c70e","ssdeep":"768:Vr43yXrO4dgTlfy1oBG1b8KWgt01js3TY6hx3bNCp:VTXKh+xA+0ls306hx32","tlshash":"3f5362226e6f1839f423dd6569c066bd3a24b113cf0382b6f97536248ac635e1f3b60c","first_seen":"2025-11-29T03:25:17.702665Z","last_seen":"2026-01-24T12:38:41.290729Z","times_seen":4,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/app.7464ff5d.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:51.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/app.7464ff5d.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928b-4ca5f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":313951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65476), with no line terminators","md5":"1851c88307acbfac5ba9cc1ccae222bf","sha1":"b65e315e4d36184ba7cc72dcaf9b92b2936eb08c","sha256":"463d407a2c500fcc049b7ea4e49377d4fe29edb855544e3c0b8ac53134660772","sha512":"2b61bbbe9453b12433429f7f7e3fc826567d47d5abbe5f5f022f6ee14137c3620fb033620e1365e7d44f88516925ecf5cf946f79b0606f7f6f5c790fb53f8b71","ssdeep":"3072:ZrIoAflot3EW5oRv5EM/MPMqLn7j/rz3wFToZQc402Z:5oRREM/MPMqLnHzz3wFTqM","tlshash":"d5645ca462b490b8c92ed1cef6fdaa497c5f35e738d140a0f3bc59c71b7289c0a9d509","first_seen":"2026-01-04T15:24:18.37296Z","last_seen":"2026-01-24T12:38:41.291817Z","times_seen":3,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"admin.content-deepgtp.top/static/js/chunk-ec680b3e.fe3e85ba.js","fqdn":"admin.content-deepgtp.top","domain":"content-deepgtp.top","tld":"top"},"ip":{"addr":"134.122.140.226","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=#/login","date":"2026-01-04T15:23:53.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admc.deep-world.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Jan 2026 07:36:43 GMT","end":"Fri, 03 Apr 2026 07:36:42 GMT"},"fingerprint":{"sha1":"3B:22:A9:93:E0:51:1A:C5:7A:77:D2:27:A3:93:5B:30:44:68:4A:09","sha256":"EE:AD:F3:95:6F:8E:EA:67:A4:74:87:E4:F1:E4:32:A3:5F:2C:DF:C8:60:81:93:54:16:BB:98:4F:5B:31:AE:AA"}}},"request":{"raw":"GET /static/js/chunk-ec680b3e.fe3e85ba.js HTTP/1.1\r\nHost: admin.content-deepgtp.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin.content-deepgtp.top/?account=\u0026password=\u0026google=\r\nCookie: server_name_session=d0b64c4094ada8b9a720e672bbd26aff\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 04 Jan 2026 15:23:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Dec 2025 13:05:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692d928c-4b36\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18910), with no line terminators","md5":"15301f33f01035d1855cc5441cba76cc","sha1":"019e7a21b406933c0bf8f3970c0a4ddd90080875","sha256":"e80ea19d80f38e1f2571f6a848374bcc95ef10bfbd4f907477a330a340500d4a","sha512":"ad15d829f5aed033ba2671cd3ee96aa51de01ef0258143f5cc26283582a1132fb8a4f68985b8955ab3896b972fa73dc732d9e186a6d57084ecdb1b77c3d2d308","ssdeep":"192:ynsiBFJ58WdL7hiJ0rTRsEq1vvureg7spppB4SBalho9Slq+zSamdFHb/V8yhu0:yskXldLo+rTHqVtg7sfN6XSx7HrOyhD","tlshash":"fd820945316ae8ae4c55d2f6645e2380a1276cc8a942f1ecf7b4ece06584d48733fbbc","first_seen":"2026-01-04T15:24:18.367204Z","last_seen":"2026-01-24T12:38:41.286256Z","times_seen":3,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"admin.content-deepgtp.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}