{"report_id":"4162a17c-8fac-47ca-8e16-f68fd45dcd5d","version":0,"status":"done","tags":[],"date":"2026-08-11T10:23:29Z","url":{"schema":"http","addr":"www.20280382.com/","fqdn":"www.20280382.com","domain":"20280382.com","tld":"com"},"ip":{"addr":"18.166.144.116","port":0,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"title":"2028体育","dom":{"size":407589,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27643)","md5":"84e42efa08ccf0c147f0ec89cc50f071","sha1":"964f2a9d546fb7ec2f0b1b58f79893c8be54239d","sha256":"dbe18ba3561a2d2be4efad314317727b1c0501dfa804be2956f2d23de362aaa4","sha512":"78084eb5a6ebf5466dcb65edb6b2dade49cdb1da54f6d73e643c61498229981e269c903734e17a0a903bc38466811bbcb5bed6d51cb3d517456e13ed38d541db","ssdeep":"3072:QG9bt1M1oO1erBK7WpK48TIxGddegOqgi/TMBslPXS1V/:1yokoQ683IiegaiQBsg","tlshash":"178439f403ac43f5f40a8b5dac763c613ee134e77fd84648f39d19a19bb2286586c896","dom_hash":"domhashb67f7419535da9a32c103716b80b7510","first_seen":"2026-08-11T10:23:49.093607Z","last_seen":"2026-08-11T10:23:49.093607Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.20280382.com/","fqdn":"www.20280382.com","domain":"20280382.com","tld":"com"},"ip":{"addr":"18.166.144.116","port":0,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T10:23:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.20280382.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"jdosi90fd.20281036.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"bjopaisd0.20281081.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"bnjug9rud.20281040.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"ghuro9ur2.20281053.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"jg8f080.20281066.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ghuro9ur2.20281053.com","ip":{"addr":"95.40.149.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-05-30T18:31:23.158888Z","last_seen":"2026-08-02T09:01:53.347765Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":487,"comment":"","tags":null,"fingerprints":null},{"fqdn":"280011ty.2028060.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jg8f080.20281066.com","ip":{"addr":"18.166.144.116","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-30T18:31:23.166419Z","last_seen":"2026-08-02T09:01:55.195652Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"134.122.214.215","ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":40,"received_data":6310825,"sent_data":22358,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.20280382.com","ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-11T10:23:34.108333Z","last_seen":"2026-08-11T10:23:34.108333Z","alert_count":3,"request_count":3,"received_data":99611,"sent_data":1446,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"2028ssvip.20281032.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-24T07:25:18.955592Z","last_seen":"2026-08-02T09:02:03.273346Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"280011ty.2038039.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bnjug9rud.20281040.com","ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-05-30T18:31:23.15551Z","last_seen":"2026-08-02T09:01:52.202074Z","alert_count":1,"request_count":1,"received_data":200,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"2028vip222.20281063.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-02T09:01:52.211053Z","last_seen":"2026-08-02T09:01:52.211053Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"134.122.214.203","ip":{"addr":"134.122.214.203","port":6003,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":573,"comment":"","tags":null,"fingerprints":null},{"fqdn":"280011ty.2028020.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-08-11T10:23:34.105613Z","last_seen":"2026-08-11T10:23:34.105613Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jdosi90fd.20281036.com","ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-05-30T18:31:23.148188Z","last_seen":"2026-08-02T09:01:53.55458Z","alert_count":3,"request_count":3,"received_data":100387,"sent_data":1555,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"bjopaisd0.20281081.com","ip":{"addr":"95.40.149.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-05-30T18:31:23.167872Z","last_seen":"2026-08-02T09:01:51.951614Z","alert_count":1,"request_count":1,"received_data":182,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T11:55:33.01301Z","times_seen":741671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-11T11:56:59.944143Z","times_seen":91730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-common.1785390737670.f1286e5e.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf7eaf365fd6ad350341b4ceaafe34ca","sha1":"7772da08f473fe1743088742a263554e67006083","sha256":"98a834d2b69023f58281f7f36f92f6f50da5c128c22b2b09c731b53e581e4bcf","sha512":"253c3a4090e683faa17d9a5b76152dc70ff1d42b3916128adef85d597e2e844dfe0d940be1f185852e6b580563a8f427cc2f5644ce8fd0a0cfa63c745aeae5fc","ssdeep":"1536:nBk8bgGcdWWa2UTH6eryXHuLmbErF/G7D1dMI5NHX4likI/voqGAClVEDtFk7qU/:nBkCvTH6wjFe9HX4lix/voqGAcyI/","tlshash":"9bf3f8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","size":161532,"data":"","first_seen":"2026-08-02T09:02:15.180367Z","last_seen":"2026-08-11T10:23:49.149737Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-11T10:23:49.156242Z","times_seen":237578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-init-c0d76f48.1785390737670.dab1f568.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1f12b500a110f5409b2ee787120e90b","sha1":"fd8cf9c7438a7db5943000fd5d36a29ab036cc10","sha256":"588747181052a4ac0755b6b26735290f82cde03b0ff55ca9b8e29a35cd76479b","sha512":"9d360fc9c6da7a4915ff148d0f8c1dd7d8916a61cc8aa27b0b7ba0ba682c57907b9731bfd7a0a9328b7d1cd350dfa9692c2085e2f261dafb082596717a059452","ssdeep":"1536:/G5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:eQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"71f31b987392b1b847db96e1523b1075b57e1dd73088e8f0c159a6803f31a9cd52afec","size":161206,"data":"","first_seen":"2026-08-02T09:02:15.09718Z","last_seen":"2026-08-11T10:23:49.121831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/index.1785390737670.4c6795bd.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"0182254656634d47788518980f5d0fcd","sha1":"0515a46084362b6ec521c4d57b838bcb3f59de0e","sha256":"457ef3da06b5c67a76c0409f0944da6079309791fc603cf634204cd6dd4648fa","sha512":"b059d870a448b71548496f389075595532a5bce7afb4fec2a6cfb20c7f7f2e3c43acb1c2ada67f43b501040c3755e1709c6135c945da9149c9af3c65fdbfbf12","ssdeep":"3072:j2ZlLazp51s5El8mj+qmninYzFEC5yqjN6b5Np0C:j2ZlLazp51s5EuiYzSSPj2F","tlshash":"43b31ae4b2b8f1b4539f467bb3323468502e1682a0cadca4d3e95ed4bf55385fc314a9","size":117486,"data":"","first_seen":"2026-08-02T09:02:15.110236Z","last_seen":"2026-08-11T10:23:49.153656Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/config/telegram.js?t=1786443777678","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","size":116886,"data":"","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-08-11T10:23:49.115157Z","times_seen":2479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/65246.1785390737670.53b537bf.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"be1bc7be63f3b712f9d4b3d0fddbdb3b","sha1":"20ff90e4a0a42ced84b5d50aac3200d1b2d66cb1","sha256":"962e7be0e0090167c5520814745d2e6d8b337240a242ec666155016e919b667a","sha512":"328ecb45f8fb7bfc4dead667d5a10555d9d66fd584b05d4432dd44d51e53048145a27bbb760a358a5ae151acdb9c8bbf2821db7c263a291e3f7501503c0a10e0","ssdeep":"1536:n2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANV6:2+iDYvPo0L8oZzAuMMsTA7mqt9zA4dA6","tlshash":"1173a501f78272385fa7e290220f2026e16e191505ac5ed8f179ffb93ef0954aa7d7b4","size":73435,"data":"","first_seen":"2026-08-02T09:02:15.126878Z","last_seen":"2026-08-11T10:23:49.137838Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cb69a27e54b4eab68dc0f61d349af99","sha1":"6d1853e603321ed63ccc2d710de0c1f11b89accb","sha256":"a7fa988b67d19f115709a8a246c5e332c23f82780c32a88ae84538df9b5afb8b","sha512":"bc2bde8941472959536cc39e5eac6c9fe34c71c81dd2b5ce054aa65e666b0b799cc6305ae13ee5386c7e42fe6dad5f81ce851c4a44d3de52253197ee044fe315","ssdeep":"","tlshash":"f00170af78c690356886343c5d2f5240b173814bd74dc6517d9c5245bf70a6e829aacb","size":822,"data":"","first_seen":"2026-08-02T09:02:15.195525Z","last_seen":"2026-08-11T10:23:49.156763Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"2bbd69200a3d758f89e8076a123ed982","sha1":"dfe2d66f2d85ddc2008401ed15dcba3515392f37","sha256":"b79cd0c532adb639e6139c9394527b217982efdbff4969494986edacd943e2b7","sha512":"ffb7e75ea86b911ed842f7525c08ad5cd4ef5085736e757c47f3b4e09b3c9497dad089fae69953dd819f57b3ac1cb3a54ba037f9a8ad3fa37d7aeac9ac36bcb3","ssdeep":"","tlshash":"07c0c0770f2c7f14110310230174f3ac5431c028fc15b302331f40018b50b0d0c30e40","size":178,"data":"","first_seen":"2026-05-25T23:43:55.293244Z","last_seen":"2026-08-11T10:23:49.157818Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d1b2d52f785cab3bbfa5606f847e675","sha1":"aa4feb8ab5ab76f7045852efdc791182c059a77d","sha256":"bfbd8e7bec32bc8cf967cf19752e2ebd2ec5d8476989a96be8300428c563b7b7","sha512":"b06d3611c25ce6b448b2d85cf1100fbb6611777fe53ed266d1f09edd481a8d38a57232c3cb53010b27a5fbaba0746da76ccb1bab76bb9633d75943342bd2bb13","ssdeep":"","tlshash":"aea0027602791431c4700f150bb575c135d13c11404170143a454d4d3f37243e4141c1","size":77,"data":"","first_seen":"2026-07-13T03:36:10.569953Z","last_seen":"2026-08-11T10:23:49.159282Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7d6cf21ba9b37cce394593785671f7","sha1":"aabeaf8e874da29cee7e1645707577446b8de63b","sha256":"6912a38811267077bd6dd2630bccd25ba04b653b4967a636d75a6ec97c5bd2fd","sha512":"9739d97867822d248e0083a78d8657485d85e70bbb7a75e0fccd283c2bdb980ded0ea78b1a4fb0540c529e602ba88286021df0553bb23e45fc91281f64a4db49","ssdeep":"","tlshash":"de31ce286eb29531a413612a1f6ff2843235d62f3148ef003f0cc7651f24d6ba6356d5","size":1686,"data":"","first_seen":"2026-06-12T10:00:06.928319Z","last_seen":"2026-08-11T10:23:49.160589Z","times_seen":1175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"a15b4803f5b926cf35dd50ad665005e3","sha1":"0dd0dd998736dc9db4ab3c7ee8f7cabc8e1e341b","sha256":"201c5550359d1e530619f58a4f77bfbe382200e2b0c85d4136df96523aee625b","sha512":"e21d282a7abbc3b8aba31153d7969b54c647e3c2bc2f1c786a6f3894ee0322540fc37d99351e5d8998991198a98b26c470c16fef19e5627cff75e0a6157f6e2d","ssdeep":"","tlshash":"b7700000be08a0a80000a0202828080c280238a0803b03080802c8023aa8c80288a802","size":24,"data":"","first_seen":"2026-05-25T23:43:55.294961Z","last_seen":"2026-08-11T10:23:49.161169Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f54a6c689ae3fb37bcded37e79fea08","sha1":"0861325faf70167325da7dfd6b4059a6991136aa","sha256":"c9a960988ba6d8cfea2c7e709385252a139280898d9b4010703981ce03184a1c","sha512":"08111d473c9567e7da677c4a5e61e232f670b58e2bac4f1a1d96005b83214368e6bdcf36efa1b99aa4708beb8a11bb3378270d70d1a8faa3b2fbea3abb10b4e6","ssdeep":"","tlshash":"82700008ec0088ab0000a00028000cc8380a00208a3b838f8a00008a2ea28b0000ac00","size":24,"data":"","first_seen":"2026-05-25T23:43:55.29586Z","last_seen":"2026-08-11T10:23:49.161752Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"c45b02b1f350ecba8716f39faa1d6dd9","sha1":"323d186c69f92adfbf21ac33010643886a3ada59","sha256":"81d9bb79dfb8f66568da929cceb338198f5fb8ef0d422c9bc19a97944981d729","sha512":"6cb26d6b01335a5779cf876ebce242b675745c80857fe191e0f42b927c5b8c40ff0896f64e6c28640c9bc1d9380344c6282790f6a7341d5ab74eba28fe93f4d2","ssdeep":"","tlshash":"eb017d9e483788107b2225bd537f5089f1a2516f8e8bcc103c1e5b00eff48ab25a2bd9","size":738,"data":"","first_seen":"2026-05-25T23:43:55.296647Z","last_seen":"2026-08-11T10:23:49.16227Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"92e2f1e0e848d1c12ad19f48a962945e","sha1":"591c27a6e16b113143236f4eb2f87b0a110fd851","sha256":"236c4e366a481fda577a729b2d671813f31b561231b0457dbcfb2ba52d052710","sha512":"368c68bf0c9615668957ef910a97652026910ba89cc32e0aa0499d1023d0568e22e2888bd15e9017f40e8f15588d74bf48c2785538f17d201bb37d2f3443f7cd","ssdeep":"","tlshash":"a641037d826245951973346a1f5e730836f340b31249de113d5c9a802f9da5f83b7bfa","size":2237,"data":"","first_seen":"2026-07-13T03:36:10.574152Z","last_seen":"2026-08-11T10:23:49.162855Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2d3475f1cf5b92ebde88c18cfb52625","sha1":"b178b44e61169b2fc5f25b0120206d3812b19cc1","sha256":"3a448e6329733e72eb2a1d80d1897a5ddf20226acbafb032eecdf71d83fe307a","sha512":"802939763c96de22534a93d89f00066ef7cd4cf58814954ebaa18ad6e77aaf19e99745c8a677625be818d3f378e5fe285ec537561be58e12504a1f3eaa23f363","ssdeep":"","tlshash":"00f0a00e0ee548131963706a4c0f9201203b2513414eea08bffe9bb24f92a6886174cc","size":538,"data":"","first_seen":"2026-05-25T23:43:55.298337Z","last_seen":"2026-08-11T10:23:49.163417Z","times_seen":1241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d09324259443e9ea7051a36073b7fe5","sha1":"2e7bfefad7ad6fc03e958650804a4f505297abe8","sha256":"c0b07b8926ff5f08c731fd2fcac4bdc8fc34379628f3a95461e7e0d24fa47f8a","sha512":"6a1c3af670b251acb2f1ec9ae9fb2f911fa75f62345786c200265c3d09338bda2c9b715d8c0d3a4ce1be896cbd35a07669b323a9af4f7c3bd21a6bee9fa30184","ssdeep":"1536:MrPpVQKuIlpK484QLsxjY/9CIT/hf2gOi:MrBK7WpK48TIxGddegOi","tlshash":"d973f1b8a9733aee3913343667af28284c5850232a5effd0380e691d4fde5156a945f3","size":78823,"data":"","first_seen":"2026-07-02T16:15:47.062894Z","last_seen":"2026-08-11T10:23:49.164046Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c6afbf60e3871a3adb96127eed3f5ac","sha1":"ee095f61ed98784d98a1f0d9226760c40c7da4a1","sha256":"013478174b011eba78548f6201d4c1f1f3768470cd1560ef80700be4ad3b43e3","sha512":"3c98498586930f816a24071bd00344c7ef3ba4f216bc738578d1ba239ceedff0af150b118ea39ed8f75548adf7427e5f82576904a2b615c85b87769f3e073778","ssdeep":"","tlshash":"4c11ed5a99d24132565f342734bd43887a38a027d580df413dcc99446fa8da6c9bf6c4","size":1012,"data":"","first_seen":"2026-07-02T16:15:47.066742Z","last_seen":"2026-08-11T10:23:49.164557Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-init-1656f0b4.1785390737670.d896ffeb.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"37039e719e77462665faf4fb276bd5c6","sha1":"3d70dab33d58362073cf620d80c824264022a83b","sha256":"3ae54a2d33471e9533783c50d97f293d984660b7ecdf7ffc939bb857e1324c8e","sha512":"6039032cfdff34596cea297c0f67da38cfc9008a9ae6f43fe7faca5f09900d509cab191099fb9ee82284c9edbebd398f725ac17254acdfb3018fa1e9073d67f2","ssdeep":"1536:QtwqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCifM+:QtwqhOIK2nCLdyACifMur06/D","tlshash":"38d3fc54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","size":136030,"data":"","first_seen":"2026-08-02T09:02:15.086252Z","last_seen":"2026-08-11T10:23:49.113929Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/newEntry.1785390737670.e471b340.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e37c8ae8ab7c183a1ce3a565de01cfb","sha1":"fcf8d0f0e81f5467177594eb86c8dffca8c65764","sha256":"a48f12486cf2054f9b87fc57b9552d2971ce7be880816611c88c579fa5c663c1","sha512":"5ea8fa6a538b20fdcc07766710b9e0a56b83fc7cd77c94538c413fb591c2f60982fd49fdf3b01dda318fb002f62aa17df67a1405962912fc844d57bd88858d7f","ssdeep":"768:50PWF+SCKJQEyC+wKQWWVcAIrsQZ6UCU4fcvVSrxzvV+tRrBl1XZOpHhurxGHUpM:Jv3WZZ6ogdV+t1sM7zC8ZlyeXsdGU9v","tlshash":"6093d890d1a0f5fcfa0cc9666e399d2ca43606c5e0d8ecf495b57d487e81e929428cfe","size":95611,"data":"","first_seen":"2026-08-11T10:23:49.119945Z","last_seen":"2026-08-11T10:23:49.119945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/60024.1785390737670.4fdc3576.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"84d04948c56037707463becefe1a0588","sha1":"0e9e381071ca1192ac424eed46f588a3f96985c6","sha256":"4bf02cac0a1564290c7e7cba5676f45f95a0f1902f47635d079d1319b8510fe0","sha512":"6585a510ef7bf6c38c9d311d395a5537e8f618fa0c6daf62c17f7be884bb7ac6a0c2540843eff9203a156bfd766435f48d3080c9536a61275c76df297ce10144","ssdeep":"96:/RuRmZqK5bwi6+7RMSRsxkw9usNUrlpex9sX2NaenPdqUDDEz:/RuRmZq8bwilXRgksKWxeX2NbnPdqUE","tlshash":"f3a1a8d872d2f071426f9679c52f249fa27bead074ccb415d181e590aef072d8a33d68","size":4873,"data":"","first_seen":"2026-08-02T09:02:15.016573Z","last_seen":"2026-08-11T10:23:49.143271Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnjug9rud.20281040.com/check?callback=OK\u0026_=1786443772081","fqdn":"bnjug9rud.20281040.com","domain":"20281040.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b9cb4ca59c78578cebfd2bfdcc25e9","sha1":"1b25b80973472ee7a4c6b4ae02766dadfd74e2cd","sha256":"7a8f372b3bb80792a32c238a5bd3c96861d83a8ba6ec51a9180f7736bcaf0d0d","sha512":"bfdf5d88009d84bacd8d667d50add2ee4c47df8f56589d9b32612f7254188be98f932af45227ccb8196a6978f1fab1a2583f9d46457d964f52d8c62eea487d8e","ssdeep":"","tlshash":"f37000fcf00c0c000003c000000c0000003f0c3003c000000c0f03300333cc0003003c","size":18,"data":"","first_seen":"2024-12-07T00:43:37.627385Z","last_seen":"2026-08-11T10:23:49.109791Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/64538.1785390737670.f274b42d.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"33db69035181b455c22ef513777db3f6","sha1":"b6073439b92247166c3305ad8b2f0d4b037dffee","sha256":"7d722262e3c7f2fc7381accbe00f5c07f7b5954bffe065812eec937b0b6a74ed","sha512":"7175e06c672bcf391bf4419b51b6e6df819ad81532592c21435fc24d0aeb7996f4dd726926630e40e76fce259ff12c87b290eb4c5d6a9192abc4b7b8f8831910","ssdeep":"3072:CoVqzyV1gZJWRvTisYzeyFhoL2gv5Lkk0W:CoVqGzRvTiVvoqy5LknW","tlshash":"b8f3fb88b2d2f078465f51f2612b105af23f59e070cc98a4d2a4e9d07e71a6dd53baec","size":170763,"data":"","first_seen":"2026-08-02T09:02:15.071599Z","last_seen":"2026-08-11T10:23:49.118903Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/35142.1785390737670.86f3d6e8.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"f658baa36beb6338a0a069e90350bc78","sha1":"21e48eae64201cba5654432604d4a399127299c4","sha256":"804da60262e31652e52f2948db23ae335eefa9eeb939cd43ab5c4a91e09cb483","sha512":"8269ff26128335cfa4801e4edb44119df5505bae8186012549d6fc11019fc7b2775d1e348b86ae062cd623d5bc1a483d25b403af8913e1d92e4b13af7d49b09d","ssdeep":"6144:uphJSssQANA+lylMsqWiQlgedbyAkK8LoxCZJcUjmlHWwZKZy/atpMnDmxMJ37+z:uphJSssNNA+lylMsqWiQlgedbyAkK8LT","tlshash":"18544c94b290b1b483af86fb721a9161d25d0e5460ccace4f23d6e80bf25746f47b5ec","size":306344,"data":"","first_seen":"2026-08-02T09:02:15.07801Z","last_seen":"2026-08-11T10:23:49.132875Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-svg.1785390737670.7ca9cdc1.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"f23791112d20f8414dcb8a3d52315295","sha1":"1a9e480541bfe8c7d87486a82d48cf1091013609","sha256":"af10ae57d25791146411c983cf43175c3e49f9c2cb671c68b0b94514a395c4e3","sha512":"d0e36c1e7d372c5f955022bd4f219aca0e1ff4bf660a395b2d5501a2e9d394c618971a803fe00a0db6de08f39bc8d15206681fb0409a61bc4ea4d0bd3bfd59b3","ssdeep":"3072:d8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:d8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"31a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","size":470777,"data":"","first_seen":"2026-08-02T09:02:15.145987Z","last_seen":"2026-08-11T10:23:49.151871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/45540.1785390737670.1a408457.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"afd9fdc86d8ae256d5acbe5504729741","sha1":"2bd973ee18bcbb4e4e1c1800f0f5f79d21422ced","sha256":"9ee09f0f2579589aaa4686bf45ac1823a220d4da65942edd555fa0af61936847","sha512":"7e3c4e2d1e61f83287ee6e8d4ba6beb89c2b81544905ea7c578ec8c5a5ee8596175eaa2e87f60711e8f770583ac6529220a6bffe1cb77a8f34b606d37920dc05","ssdeep":"6144:uYD4wFsYiSGfKnIKPP6Xm9Gm3MCrn1OSgpozfEe5a:uYD4wFsYiSAKLJ3T25","tlshash":"2924e8a4f294f1bd075fc1f1d23b501ab35b5e6120cc9ca0d296e6942e20b49da77eec","size":226937,"data":"","first_seen":"2026-08-02T09:02:15.029932Z","last_seen":"2026-08-11T10:23:49.15278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/62456.1785390737670.4d4db372.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"248b31372f5c43a7eb053cf1a2f001b8","sha1":"c954bcd1c7bc1eefc7d042524b68d794c0d7a1e3","sha256":"cbd08f1f8ea8449cb7a8cd865abb4a185c04464496d55c142567f24be3e07501","sha512":"b318fbfde2201621dc6889597f1efa1b09adae3f405729193aef91cc9b777807b387cd2a899e2b4837ccffcdee48f20eaf13877732e23769e2e2af9d500a826e","ssdeep":"1536:j17BBHfYqdGEo3sLtil62DgFsu7PIDmjjVA+lX9JAFdE6WTXzlBvk1+ejMa7zqDL:VjHzdGEXczDgFs2PXIDWTXzlA+DXr0C","tlshash":"2d041b84765170b8c296a164322f702ae23f789650dd9c24f3689ba47f7470df16fabc","size":182448,"data":"","first_seen":"2026-08-02T09:02:15.040778Z","last_seen":"2026-08-11T10:23:49.146012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/config/initGeetest4.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","size":14975,"data":"","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-08-11T10:23:49.113407Z","times_seen":2043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/configPage.js?v=7/30/2026,%2013:56:58","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"2929d9322c33526d10e396ad872c65b5","sha1":"28b1290cd7f90100c32f6d6a259f6cc3bed19f33","sha256":"2baf073a771d3cf85412ec11569d39cfce170942e560ce38c7ccd1651ca564f2","sha512":"e624017534060732ff2b38ff388efa21eeb9d5af38a054bc7cba49c8883cf068dbd66cc5f1fd63b087f559caf6bf4a9f62df36f803d5011b22b8bfff1ca02835","ssdeep":"","tlshash":"4e21db9f83858cffcb1a3f55b08b1b5d287c11d76088ac58acd4cf28e2995451239a2c","size":1293,"data":"","first_seen":"2026-04-12T02:04:53.862574Z","last_seen":"2026-08-11T10:23:49.140353Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjopaisd0.20281081.com/check?callback=OK\u0026_=1786443772078","fqdn":"bjopaisd0.20281081.com","domain":"20281081.com","tld":"com"},"ip":{"addr":"95.40.149.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b9cb4ca59c78578cebfd2bfdcc25e9","sha1":"1b25b80973472ee7a4c6b4ae02766dadfd74e2cd","sha256":"7a8f372b3bb80792a32c238a5bd3c96861d83a8ba6ec51a9180f7736bcaf0d0d","sha512":"bfdf5d88009d84bacd8d667d50add2ee4c47df8f56589d9b32612f7254188be98f932af45227ccb8196a6978f1fab1a2583f9d46457d964f52d8c62eea487d8e","ssdeep":"","tlshash":"f37000fcf00c0c000003c000000c0000003f0c3003c000000c0f03300333cc0003003c","size":18,"data":"","first_seen":"2024-12-07T00:43:37.627385Z","last_seen":"2026-08-11T10:23:49.109791Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/83749.1785390737670.4728119f.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b8f4c68020b492c7a4d24535f1e23cf","sha1":"ebafeedc96aee49c75e6fccce1fd5077e5e4ba03","sha256":"18c3cc1019d12e96527cb46d5db27163211a2065f004bf00792df31edd626e51","sha512":"999dc4ce6215bbaf820b2d57eb6c8af79392a3e424d635bc6907b7953a3c57583f6bb96f45177188b64d93609268b3c524f1cc6e3f442f03ac0290083b1a4b72","ssdeep":"768:fHPsR/cK96MH9ToL61BYHnfEj+eq11ftyQMmDiwGkqlEUGlC+Cqoyh3CbhaixKbi:YkyVOzaEjoysKxW55O6dFGl6V","tlshash":"e223f884e6f4f9fc265ec5f69b364464a02626c2b0c8ece0d1e96f587d44b96b4318fc","size":47123,"data":"","first_seen":"2026-08-02T09:02:15.080828Z","last_seen":"2026-08-11T10:23:49.116564Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/theme.config.2492c8eb.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"854a4c07653d7c484a6f1cd62d92094d","sha1":"447c62941d247dcf325ca4b7337343b66f41f161","sha256":"50a7da3a06d995ec7d47309266fb696086db0512443309052e0fee9ce4fa7b23","sha512":"4251d24666f313203251176128fac3d41d7ecfa1a4bd22cfaa5065f056f653c99c48121a875ad55018a03f03c97b39c4d23236bb0cb383005346f2378ae18898","ssdeep":"1536:72JREoblJ/zo2mtlIRM4Sb2mcua2mnzyJog9CcUWHA:ChJ/zontlGu1Onz45Hc","tlshash":"76b3ac7ee20c963a6177a8bfb46de101d12e9c0cab1d5fdef03d10a657106a9c831de9","size":112693,"data":"","first_seen":"2026-08-02T09:02:15.102566Z","last_seen":"2026-08-11T10:23:49.096572Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.20280382.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"www.20280382.com","domain":"20280382.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-11T11:54:29.38171Z","times_seen":185030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ghuro9ur2.20281053.com/check?callback=OK\u0026_=1786443772077","fqdn":"ghuro9ur2.20281053.com","domain":"20281053.com","tld":"com"},"ip":{"addr":"95.40.149.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b9cb4ca59c78578cebfd2bfdcc25e9","sha1":"1b25b80973472ee7a4c6b4ae02766dadfd74e2cd","sha256":"7a8f372b3bb80792a32c238a5bd3c96861d83a8ba6ec51a9180f7736bcaf0d0d","sha512":"bfdf5d88009d84bacd8d667d50add2ee4c47df8f56589d9b32612f7254188be98f932af45227ccb8196a6978f1fab1a2583f9d46457d964f52d8c62eea487d8e","ssdeep":"","tlshash":"f37000fcf00c0c000003c000000c0000003f0c3003c000000c0f03300333cc0003003c","size":18,"data":"","first_seen":"2024-12-07T00:43:37.627385Z","last_seen":"2026-08-11T10:23:49.109791Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/config/gd.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","size":17440,"data":"","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-08-11T10:23:49.135259Z","times_seen":1246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/66061.1785390737670.77daddb1.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"86b9602b882b1a746778688846b7dcdb","sha1":"1a2da6a84c35d43f17651220e1c8f8fb63556f57","sha256":"e195d5840f809c553bb32576f850d37c835b22bda8b2c82be6e4d2947b0c5235","sha512":"eb78111770cc3095643e333231671f85bdc962c38d8383e14cea1ca6fd0c5b571ce74ba177b121d6dbf024dc5446d787ac9701a2acf2e2a99598f36685a551e2","ssdeep":"6144:D9jv3bhFOuZKh6oKb0Ylp3PrKc9+KTx2wTl0sn:pzvU6JlKc91TAAn","tlshash":"b7541b95f76ce1be875e58fe7922c094d01c6b41b4c89e45c29e2a04fa7f385eab047c","size":284260,"data":"","first_seen":"2026-08-02T09:02:15.013611Z","last_seen":"2026-08-11T10:23:49.123453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jdosi90fd.20281036.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"jdosi90fd.20281036.com","domain":"20281036.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-11T11:54:29.38171Z","times_seen":185030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/21954.1785390737670.57c97863.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"83b75956d37a97e17261c43d730b14c4","sha1":"c79c46b14c557ffb3f01b7a136239b6613e44ff7","sha256":"93d69703e437ba29bec069248905f5ed93c914bbb97ddc88bcea2b7cf1d3ac32","sha512":"b3133ac11d75d2f0ce57128ce1d69266808b6981d2e5c2ef58e46cfff69947f488a722ec2ac625594d1d27a879cc33de65af7ee7503f13c0177705e3a4bc282a","ssdeep":"768:sPlaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:v81R6Ipyk6o","tlshash":"65132088fac2b06dd3eb733085bf505ae66a1dc0668c5438e260d6917e7198dc1fb5f8","size":41968,"data":"","first_seen":"2026-08-02T09:02:15.186054Z","last_seen":"2026-08-11T10:23:49.146945Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/42898.1785390737670.a3f8140c.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6a74f23d84d225102addba01e0e83c3","sha1":"895df21dfe949260cb80ec5aead3373640348ef6","sha256":"5b03126eedf240de1307e9092a08d05908ba48f8a9f22a3321521dd852c50ac2","sha512":"867b5a716571958aa26d20db1dfadb186d1c52bccadc56105c21834f7dc4088b7f5afd66dab2b0d43b05cf2fed21539a46659ba8da1a8ec0b7cbc3ba71d5f37c","ssdeep":"1536:HA6l7tBUHV8zZ6WmOtNlxyUUoY3NLcb1yGL5YZGT/CWYkZqX+C8+Re/ePMsmb8qI:gW7tB4Vgj5tNlxyU5Yk2cbffj7TEOiGm","tlshash":"68e31bd4f2c170f6475f45f2e12b0075b26f0d92318c98a0e25ba6597f21a48dba7eec","size":151050,"data":"","first_seen":"2026-08-02T09:02:15.16965Z","last_seen":"2026-08-11T10:23:49.14087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.20280382.com/","fqdn":"www.20280382.com","domain":"20280382.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"11589df267da536979b979b3ce2e8310","sha1":"b616ad1c390ecfc227bf9cb1c598e0ebd4423e67","sha256":"d28e5f8f5175b5bd77f3205055253775a887dd583ef8ee2d663032371cb149b2","sha512":"09bdaae9fca9ac2850089e16d740f80016554838a5a727419935c9221b298e381881d5ee3af9e489d8e58e0f985304f695a9be8f77174fc65f14816de8882f10","ssdeep":"","tlshash":"2a815f5e3ae3216562a7f03d6b8f64183574c087150cce88be5c8651df9296c89e3bee","size":4048,"data":"","first_seen":"2026-08-02T09:02:15.206623Z","last_seen":"2026-08-11T10:23:49.165112Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/31098.1785390737670.08cfef91.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b0e26017cae27c1b529fcbafbe365a6","sha1":"50ff6d7f84a59d16582c2048bdc23e641b59b03e","sha256":"653273b99269491cce3010d0ac1c639a95eb53612880f887114085f461931656","sha512":"1a21724349e95c5ba5dc049e012dce5cbaf918bd43753c9b8f204edb8cd7c44708bb3049f30603885eee2025a98299bd3f8be42694e46cdd4426d2f10672f8f3","ssdeep":"1536:X+0YvCfq8VFKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsf:6B87K5sY4brG7O3SnLJNpL","tlshash":"a474a6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec5ac446aaf8465e92857245c4da","size":358546,"data":"","first_seen":"2026-08-02T09:02:15.157076Z","last_seen":"2026-08-11T10:23:49.147953Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jdosi90fd.20281036.com/check?callback=OK\u0026_=1786443772080","fqdn":"jdosi90fd.20281036.com","domain":"20281036.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b9cb4ca59c78578cebfd2bfdcc25e9","sha1":"1b25b80973472ee7a4c6b4ae02766dadfd74e2cd","sha256":"7a8f372b3bb80792a32c238a5bd3c96861d83a8ba6ec51a9180f7736bcaf0d0d","sha512":"bfdf5d88009d84bacd8d667d50add2ee4c47df8f56589d9b32612f7254188be98f932af45227ccb8196a6978f1fab1a2583f9d46457d964f52d8c62eea487d8e","ssdeep":"","tlshash":"f37000fcf00c0c000003c000000c0000003f0c3003c000000c0f03300333cc0003003c","size":18,"data":"","first_seen":"2024-12-07T00:43:37.627385Z","last_seen":"2026-08-11T10:23:49.109791Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jg8f080.20281066.com/check?callback=OK\u0026_=1786443772079","fqdn":"jg8f080.20281066.com","domain":"20281066.com","tld":"com"},"ip":{"addr":"18.166.144.116","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b9cb4ca59c78578cebfd2bfdcc25e9","sha1":"1b25b80973472ee7a4c6b4ae02766dadfd74e2cd","sha256":"7a8f372b3bb80792a32c238a5bd3c96861d83a8ba6ec51a9180f7736bcaf0d0d","sha512":"bfdf5d88009d84bacd8d667d50add2ee4c47df8f56589d9b32612f7254188be98f932af45227ccb8196a6978f1fab1a2583f9d46457d964f52d8c62eea487d8e","ssdeep":"","tlshash":"f37000fcf00c0c000003c000000c0000003f0c3003c000000c0f03300333cc0003003c","size":18,"data":"","first_seen":"2024-12-07T00:43:37.627385Z","last_seen":"2026-08-11T10:23:49.109791Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"This is good!","filename":"https://www.20280382.com/","line_number":39,"column_number":17},{"level":"log","text":"This is good!","filename":"https://www.20280382.com/","line_number":39,"column_number":17},{"level":"log","text":"animation=n","filename":"https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","line_number":115,"column_number":17},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process10//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://134.122.214.215:3156/config/telegram.js?t=1786443777678","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process10//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://134.122.214.215:3156/config/telegram.js?t=1786443777678","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://134.122.214.215:3156/config/telegram.js?t=1786443777678","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://134.122.214.215:3156/config/telegram.js?t=1786443777678","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://134.122.214.215:3156/config/telegram.js?t=1786443777678","line_number":139,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://134.122.214.215:3156/config/telegram.js?t=1786443777678","line_number":139,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"134.122.214.215:3156/ecb/8f8306425eba6e0167bcdb24bf0f7afa96f2a85f6db9","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:23:00.003Z","timestamp":1786443780003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb24bf0f7afa96f2a85f6db9 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://134.122.214.215:3156\r\nXign: a6G3fWEpPN/bN0hk0zj/QEx1r6WmcI07jeQjjVRyarYafNL/a+Zseh4tJn4PI/TogNWy3Fv8isxMiAeZAEsqahvDzP3L/Vtvd3EdlOiG9VPbhotPaV7a7NTXVJLls/X06GHQF2BfUkVkns80qObZ87crarUvjE5Y7MXiyUeqQQM=\r\ntimestamp: 1786443779992\r\nsign: q2b4d205a202q56b\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: iBDWbdkfKZsrF7X4JMWeeZdYeMn2QaCj\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:23:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nexpires: Tue, 11 Aug 2026 10:32:12 GMT\r\nx-xss-protection: 1; mode=block\r\nx-request-id: 270679f8d0094d978651283cdc57e4bb\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245,"size_decoded":929,"mime_type":"application/json","magic":"data","md5":"9220c1a32b7bac1e8d7b5821750e3621","sha1":"1308ae70bd0c64c872a2ec44367adf4d26c7846d","sha256":"84e9ff1fb930b798e0beca299fa7963af98a9735b443a309be5ed44401c87e1b","sha512":"1b360c522bc129241ab6cd8a6d57fe497dfbef7abc3cab4ba119e376c088ec5963193f99ab2a9ec640c0d6d81a92e183c3435fd66253eda3ae0bee81e2a23383","ssdeep":"","tlshash":"fde0603aff80b20802c224e3223223c25a8821af5cdc2d1bc028fd0c0ec921b404d009","first_seen":"2026-04-18T22:08:58.582766Z","last_seen":"2026-08-11T10:23:49.094736Z","times_seen":164,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/css/index.1785390737670.0f651f82.css","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.697Z","timestamp":1786443777697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /css/index.1785390737670.0f651f82.css HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-ce57\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52823,"size_decoded":15855,"mime_type":"text/css","magic":"ASCII text, with very long lines (52823), with no line terminators","md5":"d6ebd7504d648b7a4e476a29ce46a914","sha1":"12d3361fe35581b1f1ba412b189ab08d4e123fa3","sha256":"b81c57f0d7df4b0fa97551e084ae35e3620faf21308236992d619b9c3521dcf7","sha512":"6a1f35e2f61daaf703411cc6b525f0f9acb266601c53b7a835abfe5395bc99cd2a6e6454e8ade5ce2dd095904b4ad679389359c5ec749e35ad0df48d93c06c5a","ssdeep":"768:aOgbaY4YBzbMTQlmI+D0oUBfOgBojfq3MJNof3:dYPII+woefOgBojIMJNM","tlshash":"9f33092890a9146db03ba33dfca0f15d2112c512e617ea2df767722aa1d72fac733745","first_seen":"2026-05-02T09:11:27.369567Z","last_seen":"2026-08-11T10:23:49.095987Z","times_seen":100,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/theme.config.2492c8eb.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.698Z","timestamp":1786443777698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /theme.config.2492c8eb.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-1b835\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112693,"size_decoded":16947,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38284)","md5":"854a4c07653d7c484a6f1cd62d92094d","sha1":"447c62941d247dcf325ca4b7337343b66f41f161","sha256":"50a7da3a06d995ec7d47309266fb696086db0512443309052e0fee9ce4fa7b23","sha512":"4251d24666f313203251176128fac3d41d7ecfa1a4bd22cfaa5065f056f653c99c48121a875ad55018a03f03c97b39c4d23236bb0cb383005346f2378ae18898","ssdeep":"1536:72JREoblJ/zo2mtlIRM4Sb2mcua2mnzyJog9CcUWHA:ChJ/zontlGu1Onz45Hc","tlshash":"76b3ac7ee20c963a6177a8bfb46de101d12e9c0cab1d5fdef03d10a657106a9c831de9","first_seen":"2026-08-02T09:02:15.102566Z","last_seen":"2026-08-11T10:23:49.096572Z","times_seen":2,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.203:6003/999.php/r/www.20280382.com?port=6003","fqdn":"134.122.214.203","domain":"134.122.214.203","tld":""},"ip":{"addr":"134.122.214.203","port":6003,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:22:55.384Z","timestamp":1786443775384,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /999.php/r/www.20280382.com?port=6003 HTTP/1.1\r\nHost: 134.122.214.203:6003\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jdosi90fd.20281036.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.20280382.com/","fqdn":"www.20280382.com","domain":"20280382.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:22:49.999Z","timestamp":1786443769999,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.20280382.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 16:05:40 GMT","end":"Fri, 16 Oct 2026 16:05:39 GMT"},"fingerprint":{"sha1":"C8:F2:BA:BB:33:3B:EE:85:0E:C4:AE:BF:24:28:C1:05:14:B6:27:19","sha256":"80:B9:B9:56:72:0A:AE:4C:17:31:84:30:DF:22:7C:F1:EF:82:9C:9D:1A:73:0F:20:F2:72:A2:04:F5:AD:D0:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.20280382.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:51 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-amz-id-2: ym0GKHvFOwEIKfbul8ye39sw3Z2kCdoJZ6o/21lV/mZOFy3nKIANBL7FZL5Bx22sKmhquL/PzNK3MKU0XGj5oZDvcb2b4gud\r\nx-amz-request-id: 75VFRW22PP68N9RA\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Tue, 11 Aug 2026 07:06:33 GMT\r\nETag: W/\"c003af609bb62d16158f65b93ea1d6a8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: bREgbB4guiuT11YxLfojFjnsp.qnAhf5\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":4881,"size_decoded":2812,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (372)","md5":"c003af609bb62d16158f65b93ea1d6a8","sha1":"1236a08cac6d85b808658796517520462607542e","sha256":"e763dc033ec13c85f700cad8cc97c9d8cea8c84253f447f343fa2dec347258c5","sha512":"b4d8cb28da58f56b16ea9224bf14f2e5e4dd7793ed22f2a2ea7569930afdda0c3ca428b48cc765d057d10b91cec828c58abe22117cebb7a175e3f32b30f79351","ssdeep":"96:cumgLHEBxCcQXRvzcY3vlSSnkP3WMfCRrIoETuLkyGXhsnJnGQK9S:OKHejQXZxlSSkcRrIoETuLkyGXhsJnGy","tlshash":"f4a1820e29f2211a62a3f03d679f741835b4c087150dce94be9c8651df82e6d89e37ed","first_seen":"2026-08-02T09:02:15.053309Z","last_seen":"2026-08-11T10:23:49.108427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1314,"timings":{"blocked":0,"dns":9,"connect":251,"send":0,"wait":295,"receive":0,"ssl":758},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.20280382.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.20280382.com/favicon.ico","fqdn":"www.20280382.com","domain":"20280382.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.20280382.com/","date":"2026-08-11T10:22:52.082Z","timestamp":1786443772082,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.20280382.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 16:05:40 GMT","end":"Fri, 16 Oct 2026 16:05:39 GMT"},"fingerprint":{"sha1":"C8:F2:BA:BB:33:3B:EE:85:0E:C4:AE:BF:24:28:C1:05:14:B6:27:19","sha256":"80:B9:B9:56:72:0A:AE:4C:17:31:84:30:DF:22:7C:F1:EF:82:9C:9D:1A:73:0F:20:F2:72:A2:04:F5:AD:D0:26"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.20280382.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:52 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-amz-id-2: h2/XD5XkYqX9gFSc0TMuHiYOveQ3xh/B/T6DwMfbzLQFJzNzuXMSs1voF8VpCYsyIhEcNnGQGFNzd6deTrXG0WLXnV3uKScL\r\nx-amz-request-id: TXT55680398B7DQ6\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Tue, 11 Aug 2026 07:06:33 GMT\r\nETag: W/\"c003af609bb62d16158f65b93ea1d6a8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: bREgbB4guiuT11YxLfojFjnsp.qnAhf5\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4881,"size_decoded":2812,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (372)","md5":"c003af609bb62d16158f65b93ea1d6a8","sha1":"1236a08cac6d85b808658796517520462607542e","sha256":"e763dc033ec13c85f700cad8cc97c9d8cea8c84253f447f343fa2dec347258c5","sha512":"b4d8cb28da58f56b16ea9224bf14f2e5e4dd7793ed22f2a2ea7569930afdda0c3ca428b48cc765d057d10b91cec828c58abe22117cebb7a175e3f32b30f79351","ssdeep":"96:cumgLHEBxCcQXRvzcY3vlSSnkP3WMfCRrIoETuLkyGXhsnJnGQK9S:OKHejQXZxlSSkcRrIoETuLkyGXhsJnGy","tlshash":"f4a1820e29f2211a62a3f03d679f741835b4c087150dce94be9c8651df82e6d89e37ed","first_seen":"2026-08-02T09:02:15.053309Z","last_seen":"2026-08-11T10:23:49.108427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.20280382.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"280011ty.2028020.xyz:51788/check?callback=OK\u0026_=1786443775371","fqdn":"280011ty.2028020.xyz","domain":"2028020.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","date":"2026-08-11T10:22:55.396Z","timestamp":1786443775396,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443775371 HTTP/1.1\r\nHost: 280011ty.2028020.xyz:51788\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jdosi90fd.20281036.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/r/www.20280382.com?port=3156","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:22:56.446Z","timestamp":1786443776446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /r/www.20280382.com?port=3156 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://134.122.214.203:6003/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-length: 0\r\nexpires: 0\r\nset-cookie: rcCode=ck1p; path=/; Max-Age=86400; Expires=Wed, 12-Aug-2026 10:22:57 GMT\r\nx-xss-protection: 1; mode=block\r\nx-request-id: a76bedd40b2143a8a230fbc49f96b0ed\r\npragma: no-cache\r\nlocation: https://134.122.214.215:3156/entry/register\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":241,"send":0,"wait":361,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jdosi90fd.20281036.com/check?callback=OK\u0026_=1786443772080","fqdn":"jdosi90fd.20281036.com","domain":"20281036.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.20280382.com/","date":"2026-08-11T10:22:52.290Z","timestamp":1786443772290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jdosi90fd.20281036.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 23:13:56 GMT","end":"Thu, 27 Aug 2026 23:13:55 GMT"},"fingerprint":{"sha1":"88:B2:9C:D3:67:30:7F:07:9E:CF:B7:0C:8A:EE:ED:6C:56:F0:D9:8A","sha256":"17:49:6F:93:AD:53:3C:05:EF:C3:9B:FC:4C:80:9E:40:C9:2A:2D:C8:1A:EA:22:74:E2:04:A1:FE:81:43:B5:31"}}},"request":{"raw":"GET /check?callback=OK\u0026_=1786443772080 HTTP/1.1\r\nHost: jdosi90fd.20281036.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:53 GMT\r\nContent-Length: 18\r\nConnection: keep-alive\r\nContent-Type: application/octet-stream,application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":18,"size_decoded":200,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"49b9cb4ca59c78578cebfd2bfdcc25e9","sha1":"1b25b80973472ee7a4c6b4ae02766dadfd74e2cd","sha256":"7a8f372b3bb80792a32c238a5bd3c96861d83a8ba6ec51a9180f7736bcaf0d0d","sha512":"bfdf5d88009d84bacd8d667d50add2ee4c47df8f56589d9b32612f7254188be98f932af45227ccb8196a6978f1fab1a2583f9d46457d964f52d8c62eea487d8e","ssdeep":"","tlshash":"f37000fcf00c0c000003c000000c0000003f0c3003c000000c0f03300333cc0003003c","first_seen":"2024-12-07T00:43:37.627385Z","last_seen":"2026-08-11T10:23:49.109791Z","times_seen":1109,"resource_available":true,"data":null}},"time_used":1018,"timings":{"blocked":-1,"dns":16,"connect":250,"send":0,"wait":250,"receive":0,"ssl":502},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"jdosi90fd.20281036.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","fqdn":"jdosi90fd.20281036.com","domain":"20281036.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:22:53.633Z","timestamp":1786443773633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jdosi90fd.20281036.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 23:13:56 GMT","end":"Thu, 27 Aug 2026 23:13:55 GMT"},"fingerprint":{"sha1":"88:B2:9C:D3:67:30:7F:07:9E:CF:B7:0C:8A:EE:ED:6C:56:F0:D9:8A","sha256":"17:49:6F:93:AD:53:3C:05:EF:C3:9B:FC:4C:80:9E:40:C9:2A:2D:C8:1A:EA:22:74:E2:04:A1:FE:81:43:B5:31"}}},"request":{"raw":"GET /870353.html?rcCode=www.20280382.com HTTP/1.1\r\nHost: jdosi90fd.20281036.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:54 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-amz-id-2: sbFM+sFu6D5qPD8NYvUs9lkoulecYK62LkU1HHr29xDS6Of9MeJqwT8SS6fZ/w+/Lvcm5/DmArw=\r\nx-amz-request-id: E5WPFK24MKR1X0VE\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Tue, 11 Aug 2026 07:06:31 GMT\r\nETag: W/\"f46a7e8d3f7f74934e0a68cc781abd22\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: fdxgJdmM2G2Xuj1zIiKOLvO1l68tcWOf\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11035,"size_decoded":4555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1177)","md5":"128cde24ea300fa62ae1607542221a62","sha1":"c11c55bdbefeb01cc560f3335d89c7ac5686e058","sha256":"ff08cb2201638efbd0bafa882ddbd3b6a238ae7b90d65b7b553c562e022e88d5","sha512":"b89974589592f1e93c58063602951f25b9a1a9e01859c46f34cfaa96647eec8e3612d40f49849d3037df9c3fa0d086cd6d90dc41e8a05bc0dedc88b01e6aad18","ssdeep":"192:c0OWR+HV3pZScjQX1dlv+clSSkJiBiNLLSHDgiwIaM5JsJnhXyGaUg6tkUVXTEWj:9OWRwbSFd03iBi1LSH0iFUhhtZ","tlshash":"f132624a24e718f6a2a3b3391b9f55193474d507560bcf14be6c9250ef82c2986f3bec","first_seen":"2026-08-11T10:23:49.112214Z","last_seen":"2026-08-11T10:23:49.112214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":0,"dns":3,"connect":259,"send":0,"wait":282,"receive":0,"ssl":514},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"jdosi90fd.20281036.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/config/initGeetest4.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.692Z","timestamp":1786443777692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /config/initGeetest4.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Jun 2026 19:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a36eeb8-3a7f\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14975,"size_decoded":4713,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"87855e19802d75b55afa7bcf3af515c1","sha1":"4af373375728a98d623f2299a68a91e150f2672e","sha256":"9ec8a5ef8c8ffe369dd1a5c4730dce6570c0d90955798c0be4ac04ef1c8f4baa","sha512":"3baa6d9e916abfb3d38b7ebb9372c5987e8f10534bb978383751c0094f8f5a3e764f9b8e44a73d9d4871cbaeca7e1939f0ffaf9499af5c4a71f64c3588167d85","ssdeep":"192:23aP8Ha0D+Nu5dq+EvNiqc4K25MB5VYaiQwSL4SScQVy8QRHIsGiz0iX9rES6Myy:2fe61w1iXKb2sMGUI+KQTwwHlB","tlshash":"00621d0d68f764534553b4388b9fb014b5388a53042cde41be9ce354afa843d9bbabdc","first_seen":"2026-02-16T20:32:40.162764Z","last_seen":"2026-08-11T10:23:49.113407Z","times_seen":2043,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-init-1656f0b4.1785390737670.d896ffeb.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.702Z","timestamp":1786443777702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/chunk-init-1656f0b4.1785390737670.d896ffeb.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-2135e\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136030,"size_decoded":37926,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44088)","md5":"37039e719e77462665faf4fb276bd5c6","sha1":"3d70dab33d58362073cf620d80c824264022a83b","sha256":"3ae54a2d33471e9533783c50d97f293d984660b7ecdf7ffc939bb857e1324c8e","sha512":"6039032cfdff34596cea297c0f67da38cfc9008a9ae6f43fe7faca5f09900d509cab191099fb9ee82284c9edbebd398f725ac17254acdfb3018fa1e9073d67f2","ssdeep":"1536:QtwqIPBoVbzfsO9ZuqpiXXIOU6Qgpp6KkB2EnBDsAxdrkm4SgiqvHynjM5TCifM+:QtwqhOIK2nCLdyACifMur06/D","tlshash":"38d3fc54b7d0b4b442cf13e6711b2475e3a61ca22058e8f0e31dee647f35689d26faac","first_seen":"2026-08-02T09:02:15.086252Z","last_seen":"2026-08-11T10:23:49.113929Z","times_seen":2,"resource_available":true,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/config/telegram.js?t=1786443777678","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.712Z","timestamp":1786443777712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /config/telegram.js?t=1786443777678 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-1c896\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116886,"size_decoded":18566,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (483)","md5":"4ef2154bcfb8399f256c2da15a4cb409","sha1":"e0f8f5578b2e0773ec1d79bb1cec54e1f5d6373d","sha256":"73fa4926373755b52fecfdf3145a0c9953c08af374ea69dda46fe2b3b9ddb022","sha512":"8b64643161386bdefbb7eab04416e78e5e183c50acba7b25b146aa6e733744a326566a01eb7eabb1a0a3f5b87ac8461a7ab3b9ad1c44de37ecea25af09e3eb41","ssdeep":"1536:WK4KZK+Klt3LbbdS4V+vO14KtA9phXTQ+fcZl8LDh7j8d3K+V4WMrnf/NunqxF00:Wj+dgdLbbdSA+1XTQRZ1jSBl","tlshash":"14b31c4c5cf3216285a7b1be8b9f925072759893304def203c4d9ba45f98d3c53eaad8","first_seen":"2025-05-31T08:16:48.368096Z","last_seen":"2026-08-11T10:23:49.115157Z","times_seen":2479,"resource_available":true,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/css/newEntry.1785390737670.fd5abc08.css","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:58.954Z","timestamp":1786443778954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /css/newEntry.1785390737670.fd5abc08.css HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-4df7\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19959,"size_decoded":4172,"mime_type":"text/css","magic":"ASCII text, with very long lines (19959), with no line terminators","md5":"0da11a2f8697c53856900a181edf7b9b","sha1":"ad60ab68f43a82a5881ea64a00729fc14817ab9b","sha256":"b09546ae9f1a35c02cef8748cc2e3928dfea3503d32dae0bf3787aa53169ec0b","sha512":"65ae8f560f72e4ece9361eb5fec42c47eb269492dc9dc55bd263a8345421fbc66da9baf5a8ee8ced1d00aa496b0ee916796c8d26499f21bba87ea3c0243236e7","ssdeep":"192:yHuYb12xqntfVYi8d9PIFZ+Kt52XkGHcFtcIjnbLfau1ZkP5Jpsb2yYyPNIr4spj:ELbkgr38vPgt52dq2QsB","tlshash":"379271aae558613d6877eb39abd8d5cc1036cc11cb124fbaf29470250ac7ef18537a6c","first_seen":"2026-05-19T02:14:56.369266Z","last_seen":"2026-08-11T10:23:49.11566Z","times_seen":100,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/83749.1785390737670.4728119f.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.238Z","timestamp":1786443779238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/83749.1785390737670.4728119f.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-b813\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47123,"size_decoded":15818,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46397), with no line terminators","md5":"2b8f4c68020b492c7a4d24535f1e23cf","sha1":"ebafeedc96aee49c75e6fccce1fd5077e5e4ba03","sha256":"18c3cc1019d12e96527cb46d5db27163211a2065f004bf00792df31edd626e51","sha512":"999dc4ce6215bbaf820b2d57eb6c8af79392a3e424d635bc6907b7953a3c57583f6bb96f45177188b64d93609268b3c524f1cc6e3f442f03ac0290083b1a4b72","ssdeep":"768:fHPsR/cK96MH9ToL61BYHnfEj+eq11ftyQMmDiwGkqlEUGlC+Cqoyh3CbhaixKbi:YkyVOzaEjoysKxW55O6dFGl6V","tlshash":"e223f884e6f4f9fc265ec5f69b364464a02626c2b0c8ece0d1e96f587d44b96b4318fc","first_seen":"2026-08-02T09:02:15.080828Z","last_seen":"2026-08-11T10:23:49.116564Z","times_seen":2,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jdosi90fd.20281036.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"jdosi90fd.20281036.com","domain":"20281036.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","date":"2026-08-11T10:22:54.766Z","timestamp":1786443774766,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jdosi90fd.20281036.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 23:13:56 GMT","end":"Thu, 27 Aug 2026 23:13:55 GMT"},"fingerprint":{"sha1":"88:B2:9C:D3:67:30:7F:07:9E:CF:B7:0C:8A:EE:ED:6C:56:F0:D9:8A","sha256":"17:49:6F:93:AD:53:3C:05:EF:C3:9B:FC:4C:80:9E:40:C9:2A:2D:C8:1A:EA:22:74:E2:04:A1:FE:81:43:B5:31"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: jdosi90fd.20281036.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:54 GMT\r\nContent-Type: text/javascript; charset=UTF-8\r\nContent-Length: 30462\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nReport-To: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\nTiming-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 0\r\nExpires: Tue, 18 Aug 2026 10:22:54 GMT\r\nLast-Modified: Tue, 12 Sep 2023 02:38:22 GMT\r\nVary: Accept-Encoding\r\nAge: 61457\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: max-age=604800, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":31424,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-11T11:54:29.38171Z","times_seen":185030,"resource_available":true,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"jdosi90fd.20281036.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/64538.1785390737670.f274b42d.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.706Z","timestamp":1786443777706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/64538.1785390737670.f274b42d.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-29b0b\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170763,"size_decoded":54806,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33db69035181b455c22ef513777db3f6","sha1":"b6073439b92247166c3305ad8b2f0d4b037dffee","sha256":"7d722262e3c7f2fc7381accbe00f5c07f7b5954bffe065812eec937b0b6a74ed","sha512":"7175e06c672bcf391bf4419b51b6e6df819ad81532592c21435fc24d0aeb7996f4dd726926630e40e76fce259ff12c87b290eb4c5d6a9192abc4b7b8f8831910","ssdeep":"3072:CoVqzyV1gZJWRvTisYzeyFhoL2gv5Lkk0W:CoVqGzRvTiVvoqy5LknW","tlshash":"b8f3fb88b2d2f078465f51f2612b105af23f59e070cc98a4d2a4e9d07e71a6dd53baec","first_seen":"2026-08-02T09:02:15.071599Z","last_seen":"2026-08-11T10:23:49.118903Z","times_seen":2,"resource_available":true,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/newEntry.1785390737670.e471b340.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:58.957Z","timestamp":1786443778957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/newEntry.1785390737670.e471b340.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-1757b\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95611,"size_decoded":29686,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64906), with no line terminators","md5":"0e37c8ae8ab7c183a1ce3a565de01cfb","sha1":"fcf8d0f0e81f5467177594eb86c8dffca8c65764","sha256":"a48f12486cf2054f9b87fc57b9552d2971ce7be880816611c88c579fa5c663c1","sha512":"5ea8fa6a538b20fdcc07766710b9e0a56b83fc7cd77c94538c413fb591c2f60982fd49fdf3b01dda318fb002f62aa17df67a1405962912fc844d57bd88858d7f","ssdeep":"768:50PWF+SCKJQEyC+wKQWWVcAIrsQZ6UCU4fcvVSrxzvV+tRrBl1XZOpHhurxGHUpM:Jv3WZZ6ogdV+t1sM7zC8ZlyeXsdGU9v","tlshash":"6093d890d1a0f5fcfa0cc9666e399d2ca43606c5e0d8ecf495b57d487e81e929428cfe","first_seen":"2026-08-11T10:23:49.119945Z","last_seen":"2026-08-11T10:23:49.119945Z","times_seen":1,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/api/tenant/domain/list","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:23:00.229Z","timestamp":1786443780229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /api/tenant/domain/list HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nx-request-source: https://134.122.214.215:3156\r\nXign: jJkcx6AIiZH/bebN0fwLf8xhtegfeAM2cQFWsxe4e1odY49+Wrx1rgmFldal1rdXt4tceO39LOEEyCFbfQlQem8GSFDesmzONS7S2i9DJxtuB5YRuFPbGazBCF+fobNgF3c30s2QNUbfIBaLEnDSDx41Mrp4RI7WuA22N0+5zJ0=\r\ntimestamp: 1786443780226\r\nsign: 314e555g6b5q6i3q\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: P7GnykPTekey4cYHf7GerQkf5mkzMrQA\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:23:00 GMT\r\ncontent-type: application/json\r\nexpires: Tue, 11 Aug 2026 10:25:51 GMT\r\nx-xss-protection: 1; mode=block\r\nx-request-id: 32d523db91e74ccaafa6ccbfdda28849\r\npragma: public\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=600, s-maxage=600, must-revalidate, stale-while-revalidate=30, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1236,"size_decoded":1572,"mime_type":"application/json","magic":"JSON text data","md5":"1a2727250e98d98c49e00e0cc1470eca","sha1":"1a177810ae081061130e7aa7eb25d96dbc5de4f1","sha256":"fcbdb8502b69bf553ebd62650264420ca104aded67c873d45142d6ffe25cbbf4","sha512":"e69ca4d095fbdcb74d79745cf70495522aeafbc80b09ae0232d5bc99c1880edbf3078b9737aa479bbbfe63f8439f5b962b7711dabe0c90659ea9de1c380440cd","ssdeep":"","tlshash":"9e21e7d2132c080dc9695758dd4cbc2600e938d8e861f898b0d9f2ab8908d41b807173","first_seen":"2026-05-23T10:10:55.584929Z","last_seen":"2026-08-11T10:23:49.121254Z","times_seen":18,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-init-c0d76f48.1785390737670.dab1f568.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.701Z","timestamp":1786443777701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/chunk-init-c0d76f48.1785390737670.dab1f568.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-275b6\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161206,"size_decoded":52929,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"e1f12b500a110f5409b2ee787120e90b","sha1":"fd8cf9c7438a7db5943000fd5d36a29ab036cc10","sha256":"588747181052a4ac0755b6b26735290f82cde03b0ff55ca9b8e29a35cd76479b","sha512":"9d360fc9c6da7a4915ff148d0f8c1dd7d8916a61cc8aa27b0b7ba0ba682c57907b9731bfd7a0a9328b7d1cd350dfa9692c2085e2f261dafb082596717a059452","ssdeep":"1536:/G5qxPvO2lSV822bv0bcbpM/igw/aIwC23QOoKILbjxo4wc0tvB6xVS/J+pKY3Ns:eQz/Dp5/92xoKa/x5wc0dB5/J+UU0","tlshash":"71f31b987392b1b847db96e1523b1075b57e1dd73088e8f0c159a6803f31a9cd52afec","first_seen":"2026-08-02T09:02:15.09718Z","last_seen":"2026-08-11T10:23:49.121831Z","times_seen":2,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/assets/logo/favicon.ico?v=7/30/2026,%2013:56:58","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.207Z","timestamp":1786443779207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /assets/logo/favicon.ico?v=7/30/2026,%2013:56:58 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 18755\r\nlast-modified: Fri, 20 Feb 2026 15:57:01 GMT\r\netag: \"6998844d-4943\"\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncache-control: public, max-age=2592000, immutable, no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18755,"size_decoded":19099,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"790e490814d2d6ef67ae996dfbc5380e","sha1":"77462935e3783ad4e28097d98f5de990b3170a3b","sha256":"14ee7c77ba361b0ba2bd0067fef6b39a671132d7c611fb73ebe43778d22cfd52","sha512":"4f4298b1432b415366e9cf232e121fe6b0a574dc2f78d887ec0fe78898bf30c9a3eacc800b3ab979853b015751b1d2bdad78c4618ca75f7000cba9634a298d9b","ssdeep":"384:/nVyjSjXCNBAJYcqXCOyaisnJHaZdutnm9hv+f3rCICdmRQkm9:/VtTCNBSfqNya7nYMm99+WtRP9","tlshash":"e282e1aa3c21b7a94e9d7e306fa90442585178c15b0b56c24c9897bd50dea0e2ebe933","first_seen":"2025-12-26T13:35:11.15455Z","last_seen":"2026-08-11T10:23:49.122888Z","times_seen":61,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2028ssvip.20281032.com:51788/check?callback=OK\u0026_=1786443775369","fqdn":"2028ssvip.20281032.com","domain":"20281032.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","date":"2026-08-11T10:22:55.392Z","timestamp":1786443775392,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443775369 HTTP/1.1\r\nHost: 2028ssvip.20281032.com:51788\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jdosi90fd.20281036.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bjopaisd0.20281081.com/check?callback=OK\u0026_=1786443772078","fqdn":"bjopaisd0.20281081.com","domain":"20281081.com","tld":"com"},"ip":{"addr":"95.40.149.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.20280382.com/","date":"2026-08-11T10:22:52.285Z","timestamp":1786443772285,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443772078 HTTP/1.1\r\nHost: bjopaisd0.20281081.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:53 GMT\r\nContent-Length: 18\r\nConnection: keep-alive\r\nContent-Type: application/octet-stream,application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"bjopaisd0.20281081.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/66061.1785390737670.77daddb1.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.709Z","timestamp":1786443777709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/66061.1785390737670.77daddb1.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-45664\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":284260,"size_decoded":95719,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64598), with no line terminators","md5":"86b9602b882b1a746778688846b7dcdb","sha1":"1a2da6a84c35d43f17651220e1c8f8fb63556f57","sha256":"e195d5840f809c553bb32576f850d37c835b22bda8b2c82be6e4d2947b0c5235","sha512":"eb78111770cc3095643e333231671f85bdc962c38d8383e14cea1ca6fd0c5b571ce74ba177b121d6dbf024dc5446d787ac9701a2acf2e2a99598f36685a551e2","ssdeep":"6144:D9jv3bhFOuZKh6oKb0Ylp3PrKc9+KTx2wTl0sn:pzvU6JlKc91TAAn","tlshash":"b7541b95f76ce1be875e58fe7922c094d01c6b41b4c89e45c29e2a04fa7f385eab047c","first_seen":"2026-08-02T09:02:15.013611Z","last_seen":"2026-08-11T10:23:49.123453Z","times_seen":2,"resource_available":true,"data":null}},"time_used":945,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":945,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/css/60024.1785390737670.0ab0fca2.css","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.221Z","timestamp":1786443779221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /css/60024.1785390737670.0ab0fca2.css HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-1439\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5177,"size_decoded":1631,"mime_type":"text/css","magic":"ASCII text, with very long lines (5177), with no line terminators","md5":"a0ef4268641ef0b005737ce8cc0c4b44","sha1":"9bb50b9000a419e7a701392b0d7d6c992cf585bb","sha256":"f64c7a7e6ecd620d1c7f8cc67e1eda83a0a115a8d86f3954efdaba3c09d62e66","sha512":"07605ebd7e16aef28f0ad5ed406f29ea9b77e8ba6b2079c810aacf8faf0b4a8d18d4f7775c62860cbf6d4379729a60076103a4daa833c860ddebeee3793ccbe2","ssdeep":"48:ZSPkOO2s2L5Pukasq+nArLkrL4QuQKhUjUkM5P6CdRDRWURcWaTHR/:iOvyP2r4rEDFP61LR/","tlshash":"d1b1412f01703349641bad6807dc67098325d8b399eb37da259d2a0dcbc3f861eb718b","first_seen":"2025-06-26T16:31:28.933081Z","last_seen":"2026-08-11T10:23:49.12464Z","times_seen":3741,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/35142.1785390737670.86f3d6e8.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.218Z","timestamp":1786443779218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/35142.1785390737670.86f3d6e8.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-4aca8\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":306344,"size_decoded":86264,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64908), with no line terminators","md5":"f658baa36beb6338a0a069e90350bc78","sha1":"21e48eae64201cba5654432604d4a399127299c4","sha256":"804da60262e31652e52f2948db23ae335eefa9eeb939cd43ab5c4a91e09cb483","sha512":"8269ff26128335cfa4801e4edb44119df5505bae8186012549d6fc11019fc7b2775d1e348b86ae062cd623d5bc1a483d25b403af8913e1d92e4b13af7d49b09d","ssdeep":"6144:uphJSssQANA+lylMsqWiQlgedbyAkK8LoxCZJcUjmlHWwZKZy/atpMnDmxMJ37+z:uphJSssNNA+lylMsqWiQlgedbyAkK8LT","tlshash":"18544c94b290b1b483af86fb721a9161d25d0e5460ccace4f23d6e80bf25746f47b5ec","first_seen":"2026-08-02T09:02:15.07801Z","last_seen":"2026-08-11T10:23:49.132875Z","times_seen":2,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/kc377-1/common/loginBG.png?1785390685798","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.299Z","timestamp":1786443779299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /kc377-1/common/loginBG.png?1785390685798 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Jun 2025 15:30:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d6796-2056e1\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2119393,"size_decoded":2120428,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"d29e8557fb45d605b9ef3979ba78cdb6","sha1":"8aa2981c2b1ba9b6e0c101c1c1a3bb07513fe528","sha256":"b2eb9606e105f3a490d7b24edd16185e2c7fe543b5aa6c47943324c88bc49e63","sha512":"d7295666e8b36d0098c513de1c22873f7caf737bd605f8e503a9ef07d5f510d96a829ec260c4c5e77cc3c2b2ef11d87b90359c49397613459a7a658d0679390b","ssdeep":"24576:s88EGWEFBQ+8FpJe7b5P0UDdLLmUvEY5RH60:s88bWcBue5P0QLLmGEY360","tlshash":"20253394c3db4f2e0db49a7543822387e6f84025710fbd3a468edad10ec5e9659e0ede","first_seen":"2025-08-07T02:40:45.996086Z","last_seen":"2026-08-11T10:23:49.13393Z","times_seen":131,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"280011ty.2038039.xyz:51788/check?callback=OK\u0026_=1786443775370","fqdn":"280011ty.2038039.xyz","domain":"2038039.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","date":"2026-08-11T10:22:55.394Z","timestamp":1786443775394,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443775370 HTTP/1.1\r\nHost: 280011ty.2038039.xyz:51788\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jdosi90fd.20281036.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnjug9rud.20281040.com/check?callback=OK\u0026_=1786443772081","fqdn":"bnjug9rud.20281040.com","domain":"20281040.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.20280382.com/","date":"2026-08-11T10:22:52.293Z","timestamp":1786443772293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnjug9rud.20281040.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 23:13:29 GMT","end":"Thu, 27 Aug 2026 23:13:28 GMT"},"fingerprint":{"sha1":"8D:63:4D:1B:A9:85:D6:48:F5:8C:C6:A6:D9:95:0D:FF:33:5D:BB:40","sha256":"0C:DA:1F:9D:26:85:32:CB:B6:90:3F:25:62:69:B6:64:EB:9D:AC:33:28:B5:97:BF:4D:DE:8A:86:A8:96:C4:E9"}}},"request":{"raw":"GET /check?callback=OK\u0026_=1786443772081 HTTP/1.1\r\nHost: bnjug9rud.20281040.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:53 GMT\r\nContent-Length: 18\r\nConnection: keep-alive\r\nContent-Type: application/octet-stream,application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":18,"size_decoded":200,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"49b9cb4ca59c78578cebfd2bfdcc25e9","sha1":"1b25b80973472ee7a4c6b4ae02766dadfd74e2cd","sha256":"7a8f372b3bb80792a32c238a5bd3c96861d83a8ba6ec51a9180f7736bcaf0d0d","sha512":"bfdf5d88009d84bacd8d667d50add2ee4c47df8f56589d9b32612f7254188be98f932af45227ccb8196a6978f1fab1a2583f9d46457d964f52d8c62eea487d8e","ssdeep":"","tlshash":"f37000fcf00c0c000003c000000c0000003f0c3003c000000c0f03300333cc0003003c","first_seen":"2024-12-07T00:43:37.627385Z","last_seen":"2026-08-11T10:23:49.109791Z","times_seen":1109,"resource_available":true,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":17,"connect":251,"send":0,"wait":251,"receive":0,"ssl":506},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"bnjug9rud.20281040.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/config/gd.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.694Z","timestamp":1786443777694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /config/gd.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Jun 2026 19:49:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a36eeb8-4420\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17440,"size_decoded":5194,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"368318100a3c0f64373230a250953d5a","sha1":"6e0d91639cafd23f1b22aecee332da83c70b93ea","sha256":"dffc9b203a19b9e70363f75f737b7afe2164d6b8c045800d4dd7931d9093aff4","sha512":"91077ca792821795a816a0ee1a9cef242bf2915c02402706c7bd5c027c62f4bc52517b6a5e3db9f4b873e5a3c9d652758cc277c1f5ba07dc12e0d69b4f6e9eeb","ssdeep":"384:bJA61XVpi5LH4NmeJPXwXkQdcAwR0Nw3zzbSGwYg1C:bJA6BZX+oJjzzgY","tlshash":"80721f4d68f7905345a3b03c8bafa114b5388643181cde457e9ce394af6843d97babdc","first_seen":"2026-05-19T02:14:56.346288Z","last_seen":"2026-08-11T10:23:49.135259Z","times_seen":1246,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/ecb/8f8306425eba6e0167bcdb25a31b67ec8f","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:23:00.002Z","timestamp":1786443780002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /ecb/8f8306425eba6e0167bcdb25a31b67ec8f HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://134.122.214.215:3156\r\nXign: QGoucWsX3DCHG3uuj8v8JueNCPor4ZpewOpGJ0Q0DOYG1LMoJ4cR0+U96XcfJ3xSAA53d4u9/V6nAhSThrxiDTCkYkT+RfG0sT40mSA+4Dcho+cBk8kX8Wda6tjQ70DUrrKjxEq+BlGekg78LIMjPWp02VVVU8m5cKG2LpEfspM=\r\ntimestamp: 1786443779992\r\nsign: 15412626747r2c5i\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: iZFBeBTsmk4QXKpfaRjhshzCpTeNiAc8\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:23:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nexpires: Tue, 11 Aug 2026 10:23:30 GMT\r\nx-xss-protection: 1; mode=block\r\nx-request-id: 458b3d0128494813ad2daa62bd2c4abc\r\npragma: public\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=180, s-maxage=180, must-revalidate, stale-while-revalidate=30, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4109,"size_decoded":4793,"mime_type":"application/json","magic":"data","md5":"46b4260bab12510d739b0827f196f6f6","sha1":"4a2e2bcc36219a81b635bb246a85c34bac96a324","sha256":"574045dc6d9ae194bd78bff4e04c331e168827c2a81eaf2f2cb860b74b0272f5","sha512":"d34d0214e38acc6d2a0ff42ee9ba188835f7ba1099092bd350a090da46c89f4f1b21f48389998de2f59e059dbee9f1e370edf7d7f24d44c54b477647cb0c0962","ssdeep":"96:eOGS7hqEipTECBC1Xq9ad7yhq7UHSMV3ljbgCQxQdd7U5JvFgAHSRU1amWAdNqOE:VP75+ACwh+hFloR2dU7vhyRUBWAPdMee","tlshash":"7ed18e73e198fb10ff925cbd985981951ad83b17f696bd9ed32053d11ba204d53dc280","first_seen":"2026-08-11T10:23:49.135669Z","last_seen":"2026-08-11T10:23:49.135669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/entry/register","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-11T10:22:57.296Z","timestamp":1786443777296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /entry/register HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.203:6003/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\ncache-control: public, s-maxage=600, max-age=0, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92682,"size_decoded":50893,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (52289)","md5":"bac717c8629af561ce24b1fe48ee91a3","sha1":"0b4b19aa2038e40be86245278f2044c636732a80","sha256":"9c08db8957c4f3ef6ec102d5b1816a118d62a3ba001fec247a4221bf17e582c3","sha512":"30bb977a974a9c5556d611d2c9c41cd9900ec5bbdfd55dad60d5a91a2b997c6e1c6967fc37edfe9c98d2170fca3e8ffdf01f3636b4b700f83b0d7d2c9c571e2f","ssdeep":"1536:wErPpVQKuIlpK484QLsxjY/9CIT/hf2gOqgiz:BrBK7WpK48TIxGddegOqgiz","tlshash":"f393d07e9cf359aa3523303a1fbf71086d7590135a0dfe803d0d6a484fd5a5a49e27e2","first_seen":"2026-08-02T09:02:15.037777Z","last_seen":"2026-08-11T10:23:49.136971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/65246.1785390737670.53b537bf.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.312Z","timestamp":1786443779312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/65246.1785390737670.53b537bf.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-11edb\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73435,"size_decoded":19436,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48688)","md5":"be1bc7be63f3b712f9d4b3d0fddbdb3b","sha1":"20ff90e4a0a42ced84b5d50aac3200d1b2d66cb1","sha256":"962e7be0e0090167c5520814745d2e6d8b337240a242ec666155016e919b667a","sha512":"328ecb45f8fb7bfc4dead667d5a10555d9d66fd584b05d4432dd44d51e53048145a27bbb760a358a5ae151acdb9c8bbf2821db7c263a291e3f7501503c0a10e0","ssdeep":"1536:n2+iDvYvNjx4Uyao0L8oDNzAuMMsTAQ0mqt2pXYzA4dANV6:2+iDYvPo0L8oZzAuMMsTA7mqt9zA4dA6","tlshash":"1173a501f78272385fa7e290220f2026e16e191505ac5ed8f179ffb93ef0954aa7d7b4","first_seen":"2026-08-02T09:02:15.126878Z","last_seen":"2026-08-11T10:23:49.137838Z","times_seen":2,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/ecb/8f8306425eb470136db39579b90777ecddf9bb1d7eb66d610512ba3f28c76809194d79333dd2bd9b227cb04fc1d9b3e7908c45fd8e","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:23:00.005Z","timestamp":1786443780005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /ecb/8f8306425eb470136db39579b90777ecddf9bb1d7eb66d610512ba3f28c76809194d79333dd2bd9b227cb04fc1d9b3e7908c45fd8e HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://134.122.214.215:3156\r\nXign: qT5a7dCWf3w1+tToaLw7ls8S6px8aZKHRrNUsZ6eNY7u3Jovaz0NlAp6ZKUTIxchRg1VllyU5zwx20vz0uAhU5b0bFeVckADsZ1HLQuwOFyXX4bURWlQjohHYHcM8ZTDIxRsCMqByDGMJgtcDVnboirjPN/O8sbxVy7m+L0jlPs=\r\ntimestamp: 1786443779992\r\nsign: a5n711397f672i1u\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: E5NSHHrTwMR4pKnF2NwEXn3jkYyNNhbG\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:23:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nexpires: 0\r\nx-xss-protection: 1; mode=block\r\nx-request-id: f03017ca8ed04965bb8ee5271384c2bb\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4968,"size_decoded":5595,"mime_type":"application/json","magic":"data","md5":"49ba4e2a6cd028b944d592a6511ae36b","sha1":"92227610fe0ab6a5adbe3bc91ad0cf38e8602b19","sha256":"a081890d5329ac2f7e077f54b28d955d19ac7455df4a1c9cb871156e3c209583","sha512":"7d2b8e3c9f12e87661adffe4fe78ae6ce71aa354865dd70702c491669f78064a440e9e1656278d3fc6c2000b174500d21f4cc33436d5c8b655668f392098311b","ssdeep":"192:VMN10VWaCg4YMH7CNnC49RHKef3/6ZPY1bA2V:OiO1YMHCTHqASJY1M2V","tlshash":"d2f19d22377df3e8e1bac2f118a2c9587a612ee5b230f244c9a861005f4050caa6d0ed","first_seen":"2026-08-11T10:23:49.139117Z","last_seen":"2026-08-11T10:23:49.139117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ghuro9ur2.20281053.com/check?callback=OK\u0026_=1786443772077","fqdn":"ghuro9ur2.20281053.com","domain":"20281053.com","tld":"com"},"ip":{"addr":"95.40.149.38","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.20280382.com/","date":"2026-08-11T10:22:52.282Z","timestamp":1786443772282,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443772077 HTTP/1.1\r\nHost: ghuro9ur2.20281053.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"ghuro9ur2.20281053.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/configPage.js?v=7/30/2026,%2013:56:58","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.691Z","timestamp":1786443777691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /configPage.js?v=7/30/2026,%2013:56:58 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:57:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7b3-50d\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1293,"size_decoded":1069,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1245), with no line terminators","md5":"2929d9322c33526d10e396ad872c65b5","sha1":"28b1290cd7f90100c32f6d6a259f6cc3bed19f33","sha256":"2baf073a771d3cf85412ec11569d39cfce170942e560ce38c7ccd1651ca564f2","sha512":"e624017534060732ff2b38ff388efa21eeb9d5af38a054bc7cba49c8883cf068dbd66cc5f1fd63b087f559caf6bf4a9f62df36f803d5011b22b8bfff1ca02835","ssdeep":"","tlshash":"4e21db9f83858cffcb1a3f55b08b1b5d287c11d76088ac58acd4cf28e2995451239a2c","first_seen":"2026-04-12T02:04:53.862574Z","last_seen":"2026-08-11T10:23:49.140353Z","times_seen":34,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/42898.1785390737670.a3f8140c.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.708Z","timestamp":1786443777708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/42898.1785390737670.a3f8140c.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-24e0a\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151050,"size_decoded":48848,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f6a74f23d84d225102addba01e0e83c3","sha1":"895df21dfe949260cb80ec5aead3373640348ef6","sha256":"5b03126eedf240de1307e9092a08d05908ba48f8a9f22a3321521dd852c50ac2","sha512":"867b5a716571958aa26d20db1dfadb186d1c52bccadc56105c21834f7dc4088b7f5afd66dab2b0d43b05cf2fed21539a46659ba8da1a8ec0b7cbc3ba71d5f37c","ssdeep":"1536:HA6l7tBUHV8zZ6WmOtNlxyUUoY3NLcb1yGL5YZGT/CWYkZqX+C8+Re/ePMsmb8qI:gW7tB4Vgj5tNlxyU5Yk2cbffj7TEOiGm","tlshash":"68e31bd4f2c170f6475f45f2e12b0075b26f0d92318c98a0e25ba6597f21a48dba7eec","first_seen":"2026-08-02T09:02:15.16965Z","last_seen":"2026-08-11T10:23:49.14087Z","times_seen":2,"resource_available":true,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/ecb/8f8306425eb470136db39579b90777ecddf9bb1d7eb66d610512ba3f28c76809194d79333dd2bd9b227cb04fc1d9b3e7908c45fd8e","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:23:00.006Z","timestamp":1786443780006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /ecb/8f8306425eb470136db39579b90777ecddf9bb1d7eb66d610512ba3f28c76809194d79333dd2bd9b227cb04fc1d9b3e7908c45fd8e HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nContent-Type: application/x-www-form-urlencoded\r\nx-request-source: https://134.122.214.215:3156\r\nXign: P2z7SPtcxPTO0995Gr6MMOUrwBqKk3fRKoZQ/QIW288rPBBRyEslzpJnNCNUmFqxK9DrptrGd/FUQl36XwHhaGAKrXl0YVCZJ3AxUoWl/JCyzquENG9sSMTOAKZ63s6gmXFtg9p8TW/XGhNUG37pyybD5PNOoP19HMrcCrMqamE=\r\ntimestamp: 1786443779992\r\nsign: 224g687u5r3d1q2r\r\nversion: 5.6.12.0\r\nclient-type: web\r\ndevice-id: P7GnykPTekey4cYHf7GerQkf5mkzMrQA\r\nlang: zh-CN\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:23:00 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nexpires: 0\r\nx-xss-protection: 1; mode=block\r\nx-request-id: 6066c7f258e14d1da00e996df18a5fb0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccess-control-allow-origin: *\r\nx-custom-check: true, true\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4052,"size_decoded":4679,"mime_type":"application/json","magic":"data","md5":"0c09e188541b1450e2889749b87faac4","sha1":"36985fa674e423e1aa0caea6229a80eaf9bd9f57","sha256":"1a76bf5bbb691baeb26114393b12b71e63505956ebab5f3e185f68bdf5572ea6","sha512":"75e98cab3f6e77a125f8968f9c7b7e2d0f7895c8921a476a9407c60bd9b388571f7a070b339fdc22f8d39b5519059b465ee45232b036c7f8706f923329ffe9ba","ssdeep":"96:eOGeIK3LCTC7rkTvNLvfeI7e2Cs/DAxlI/KtT3SLnf8iAkAxbwz2qHy3L3lLs8wI:V8K337rYvN7feI6PFXI/qT3Qf8XFm2eM","tlshash":"32c18d48ccd9e3b5cbc9e0ac67149ee90152b25b0701a9a4cd7880339fd71b50bad2bf","first_seen":"2026-08-11T10:23:49.142093Z","last_seen":"2026-08-11T10:23:49.142093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2028vip222.20281063.com:51788/check?callback=OK\u0026_=1786443775373","fqdn":"2028vip222.20281063.com","domain":"20281063.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","date":"2026-08-11T10:22:55.400Z","timestamp":1786443775400,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443775373 HTTP/1.1\r\nHost: 2028vip222.20281063.com:51788\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jdosi90fd.20281036.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/60024.1785390737670.4fdc3576.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.223Z","timestamp":1786443779223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/60024.1785390737670.4fdc3576.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-1309\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4873,"size_decoded":2248,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4873), with no line terminators","md5":"84d04948c56037707463becefe1a0588","sha1":"0e9e381071ca1192ac424eed46f588a3f96985c6","sha256":"4bf02cac0a1564290c7e7cba5676f45f95a0f1902f47635d079d1319b8510fe0","sha512":"6585a510ef7bf6c38c9d311d395a5537e8f618fa0c6daf62c17f7be884bb7ac6a0c2540843eff9203a156bfd766435f48d3080c9536a61275c76df297ce10144","ssdeep":"96:/RuRmZqK5bwi6+7RMSRsxkw9usNUrlpex9sX2NaenPdqUDDEz:/RuRmZq8bwilXRgksKWxeX2NbnPdqUE","tlshash":"f3a1a8d872d2f071426f9679c52f249fa27bead074ccb415d181e590aef072d8a33d68","first_seen":"2026-08-02T09:02:15.016573Z","last_seen":"2026-08-11T10:23:49.143271Z","times_seen":2,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/kc377-1/common/registerPop.png?1785390685798","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.325Z","timestamp":1786443779325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /kc377-1/common/registerPop.png?1785390685798 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Feb 2026 15:57:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6998844d-2470a\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149258,"size_decoded":149648,"mime_type":"image/png","magic":"PNG image data, 807 x 1112, 8-bit colormap, non-interlaced","md5":"4380b56dd21cade654e6a89d90ec1030","sha1":"1b3ec82b7d9ccb99aa53d3e2bb003d19ae2850eb","sha256":"e3797e21f3da053ce97aa87ff9b0e1a55426df643255046f57f36663bf87a167","sha512":"7f98642235e9d0bb30431d6f9606527cd56bb1385b984bbdb22744e4d4ab1995a31fa856d24e30487d5f8eeffce4462fc5865f3bea85923bd5259bb35fab54fb","ssdeep":"3072:YEL73PbddTZgAVhKmgYjAF7iSGNMAFbP/7IGH7sBwsE0TbTWsraNSsnbM6H:YELf7ZdTbgfAFH3o1HTlraNSIZ","tlshash":"a1e312325625c2a1c80dbdd5f9eaa97f021e29337cf6c55d4cba6840f64ae38484b372","first_seen":"2025-12-26T13:35:11.169634Z","last_seen":"2026-08-11T10:23:49.144414Z","times_seen":57,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":900,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.20280382.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"www.20280382.com","domain":"20280382.com","tld":"com"},"ip":{"addr":"18.162.86.84","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.20280382.com/","date":"2026-08-11T10:22:51.475Z","timestamp":1786443771475,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.20280382.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 16:05:40 GMT","end":"Fri, 16 Oct 2026 16:05:39 GMT"},"fingerprint":{"sha1":"C8:F2:BA:BB:33:3B:EE:85:0E:C4:AE:BF:24:28:C1:05:14:B6:27:19","sha256":"80:B9:B9:56:72:0A:AE:4C:17:31:84:30:DF:22:7C:F1:EF:82:9C:9D:1A:73:0F:20:F2:72:A2:04:F5:AD:D0:26"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: www.20280382.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Tue, 11 Aug 2026 10:22:51 GMT\r\nContent-Type: text/javascript; charset=UTF-8\r\nContent-Length: 30462\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nReport-To: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\nTiming-Allow-Origin: *\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 0\r\nExpires: Tue, 18 Aug 2026 10:22:51 GMT\r\nLast-Modified: Tue, 12 Sep 2023 02:38:22 GMT\r\nVary: Accept-Encoding\r\nAge: 61454\r\nAlt-Svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nCache-Control: max-age=604800, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":31424,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-11T11:54:29.38171Z","times_seen":185030,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"www.20280382.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"280011ty.2028060.xyz:51788/check?callback=OK\u0026_=1786443775372","fqdn":"280011ty.2028060.xyz","domain":"2028060.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jdosi90fd.20281036.com/870353.html?rcCode=www.20280382.com","date":"2026-08-11T10:22:55.398Z","timestamp":1786443775398,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443775372 HTTP/1.1\r\nHost: 280011ty.2028060.xyz:51788\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jdosi90fd.20281036.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/css/66061.1785390737670.4d45d475.css","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.696Z","timestamp":1786443777696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /css/66061.1785390737670.4d45d475.css HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-5aca0\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":371872,"size_decoded":92984,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9dc37e0586bba9a0e93cf443735feb32","sha1":"0086d7e04dfb52168a3636605ea3facf2cf02134","sha256":"05d71bfd1b2728049bc8868c0c8b65892726faf1e2d90095af95c5352f99a70f","sha512":"f3bde48af7bf644bdf7f7fe801371079d9d2957200bfc3a5fdc4d152d27e870d1944572c5916a348b92105aef3bcc7dfe3ff7313680f38a3088322099c8ceae1","ssdeep":"6144:z4+4r0H8Tu4+4r5cRlGuEQUQ929srbnpTP4THrU4:z4+4ZTu4+4yaTHrU4","tlshash":"ce840a6caf10307e15a7cb27b6a0f5589c36a443f9bfde9af3a53d580789a510623c13","first_seen":"2026-05-02T09:11:27.373192Z","last_seen":"2026-08-11T10:23:49.145447Z","times_seen":100,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/62456.1785390737670.4d4db372.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.706Z","timestamp":1786443777706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/62456.1785390737670.4d4db372.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-2c8b0\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182448,"size_decoded":56755,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"248b31372f5c43a7eb053cf1a2f001b8","sha1":"c954bcd1c7bc1eefc7d042524b68d794c0d7a1e3","sha256":"cbd08f1f8ea8449cb7a8cd865abb4a185c04464496d55c142567f24be3e07501","sha512":"b318fbfde2201621dc6889597f1efa1b09adae3f405729193aef91cc9b777807b387cd2a899e2b4837ccffcdee48f20eaf13877732e23769e2e2af9d500a826e","ssdeep":"1536:j17BBHfYqdGEo3sLtil62DgFsu7PIDmjjVA+lX9JAFdE6WTXzlBvk1+ejMa7zqDL:VjHzdGEXczDgFs2PXIDWTXzlA+DXr0C","tlshash":"2d041b84765170b8c296a164322f702ae23f789650dd9c24f3689ba47f7470df16fabc","first_seen":"2026-08-02T09:02:15.040778Z","last_seen":"2026-08-11T10:23:49.146012Z","times_seen":2,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/21954.1785390737670.57c97863.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:58.941Z","timestamp":1786443778941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/21954.1785390737670.57c97863.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-a3f0\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41968,"size_decoded":9137,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41968), with no line terminators","md5":"83b75956d37a97e17261c43d730b14c4","sha1":"c79c46b14c557ffb3f01b7a136239b6613e44ff7","sha256":"93d69703e437ba29bec069248905f5ed93c914bbb97ddc88bcea2b7cf1d3ac32","sha512":"b3133ac11d75d2f0ce57128ce1d69266808b6981d2e5c2ef58e46cfff69947f488a722ec2ac625594d1d27a879cc33de65af7ee7503f13c0177705e3a4bc282a","ssdeep":"768:sPlaSfmzKrMdvf0eMQ/96loumY1PI1yBK9LudEz+yUy51y9y0yk6Dio+ILqpTeY:v81R6Ipyk6o","tlshash":"65132088fac2b06dd3eb733085bf505ae66a1dc0668c5438e260d6917e7198dc1fb5f8","first_seen":"2026-08-02T09:02:15.186054Z","last_seen":"2026-08-11T10:23:49.146945Z","times_seen":2,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/31098.1785390737670.08cfef91.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.555Z","timestamp":1786443779555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/31098.1785390737670.08cfef91.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-57892\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":358546,"size_decoded":68033,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65338), with no line terminators","md5":"6b0e26017cae27c1b529fcbafbe365a6","sha1":"50ff6d7f84a59d16582c2048bdc23e641b59b03e","sha256":"653273b99269491cce3010d0ac1c639a95eb53612880f887114085f461931656","sha512":"1a21724349e95c5ba5dc049e012dce5cbaf918bd43753c9b8f204edb8cd7c44708bb3049f30603885eee2025a98299bd3f8be42694e46cdd4426d2f10672f8f3","ssdeep":"1536:X+0YvCfq8VFKAUSseG1SY46DCdlBBo3AgXOG9AsqCfCXsvCfCXsLCfCXsyCfCXsf:6B87K5sY4brG7O3SnLJNpL","tlshash":"a474a6f4c248c6fdea04ce0a7e7d6f2d50723783f2ec5ac446aaf8465e92857245c4da","first_seen":"2026-08-02T09:02:15.157076Z","last_seen":"2026-08-11T10:23:49.147953Z","times_seen":2,"resource_available":true,"data":null}},"time_used":891,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":891,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/css/chunk-common.1785390737670.1da673db.css","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.694Z","timestamp":1786443777694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /css/chunk-common.1785390737670.1da673db.css HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-34c8\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13512,"size_decoded":4382,"mime_type":"text/css","magic":"ASCII text, with very long lines (13512), with no line terminators","md5":"aac21ade8d6733e0cc36ad308f0dc23c","sha1":"e30403a376f8707d7cf9d4276fdbc74d8580b790","sha256":"786a52978dcde25224fe9d711d8edfd3e59fe5131a83d3828ea7ef5bc0e2bc05","sha512":"3fd21be51b648584621d3fbc621806a29af65fe1d7d5bf093d083c045d450771104cd631bc54ac9e83a6a9fcabd03ec8befe8ef67e249732f5d3b739666cbeff","ssdeep":"192:4dQK/X4cBY4mZGX1lPUTLA7gYEe/i//L+rB4hHSQZA2VxM2Xwxvk:M8fTGEe/i//L+yhHBrxIk","tlshash":"bc52a631d634b53ce57be226f9d09adc6024d417e6730baeea643b3ac5ca5d215332c8","first_seen":"2026-05-30T18:31:31.773937Z","last_seen":"2026-08-11T10:23:49.148884Z","times_seen":30,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-common.1785390737670.f1286e5e.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.703Z","timestamp":1786443777703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/chunk-common.1785390737670.f1286e5e.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-276fc\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161532,"size_decoded":36634,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf7eaf365fd6ad350341b4ceaafe34ca","sha1":"7772da08f473fe1743088742a263554e67006083","sha256":"98a834d2b69023f58281f7f36f92f6f50da5c128c22b2b09c731b53e581e4bcf","sha512":"253c3a4090e683faa17d9a5b76152dc70ff1d42b3916128adef85d597e2e844dfe0d940be1f185852e6b580563a8f427cc2f5644ce8fd0a0cfa63c745aeae5fc","ssdeep":"1536:nBk8bgGcdWWa2UTH6eryXHuLmbErF/G7D1dMI5NHX4likI/voqGAClVEDtFk7qU/:nBkCvTH6wjFe9HX4lix/voqGAcyI/","tlshash":"9bf3f8c5b3a0f07e9a1ed53779331499b12f758274c87c60f1a1ade6bf1a704a436ca8","first_seen":"2026-08-02T09:02:15.180367Z","last_seen":"2026-08-11T10:23:49.149737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/css/83749.1785390737670.f8c5c350.css","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.236Z","timestamp":1786443779236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /css/83749.1785390737670.f8c5c350.css HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-2f5a\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12122,"size_decoded":2791,"mime_type":"text/css","magic":"ASCII text, with very long lines (12122), with no line terminators","md5":"51d8e5eb0ad9efd09c03a7bc1653f1ac","sha1":"3ad5f3eb2182a25e2ed4a98691b4462ee543ef85","sha256":"d87099add4c0745d8de81bc4d8bd73681bf951a46f8557d59e2283471d8df4bb","sha512":"27d189b457255d36b884d017c8de26ff91c6a6bd8154e75ae02affbd615877a767bc03b7d849169a5d3662a26d3808c15cc9e5c1dc8459610afa9ca9832b8e00","ssdeep":"192:kBXkGHcFtcI9Kx7xN1XM3GW0kQpI0S/ubbmd27KH9w0PziUXVHiW7BHd9dlxSHT/:gdqlK","tlshash":"bc423f99f599b13e6c17fb39efd5c1cc62269851db230e69f60035a206c7ef081266bc","first_seen":"2026-08-02T09:02:15.088297Z","last_seen":"2026-08-11T10:23:49.150625Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jg8f080.20281066.com/check?callback=OK\u0026_=1786443772079","fqdn":"jg8f080.20281066.com","domain":"20281066.com","tld":"com"},"ip":{"addr":"18.166.144.116","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.20280382.com/","date":"2026-08-11T10:22:52.289Z","timestamp":1786443772289,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /check?callback=OK\u0026_=1786443772079 HTTP/1.1\r\nHost: jg8f080.20281066.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.20280382.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-11","alert":"Sinkholed","trigger":"jg8f080.20281066.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/chunk-svg.1785390737670.7ca9cdc1.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.699Z","timestamp":1786443777699,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/chunk-svg.1785390737670.7ca9cdc1.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-72ef9\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:57 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":470777,"size_decoded":89720,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"f23791112d20f8414dcb8a3d52315295","sha1":"1a9e480541bfe8c7d87486a82d48cf1091013609","sha256":"af10ae57d25791146411c983cf43175c3e49f9c2cb671c68b0b94514a395c4e3","sha512":"d0e36c1e7d372c5f955022bd4f219aca0e1ff4bf660a395b2d5501a2e9d394c618971a803fe00a0db6de08f39bc8d15206681fb0409a61bc4ea4d0bd3bfd59b3","ssdeep":"3072:d8nz2uaLZSZvx6Q/sIPrekK+mB6Ua94sRZI7gbpF/:d8nz2uasNxpXPrekK+mB6UHsE4pF/","tlshash":"31a4fcb4c190f4edf704ce196e7c9e1c50321688e0a9e9e52da9fe0d9e85d6b241cdec","first_seen":"2026-08-02T09:02:15.145987Z","last_seen":"2026-08-11T10:23:49.151871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/45540.1785390737670.1a408457.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.704Z","timestamp":1786443777704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/45540.1785390737670.1a408457.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-37679\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":226937,"size_decoded":64540,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"afd9fdc86d8ae256d5acbe5504729741","sha1":"2bd973ee18bcbb4e4e1c1800f0f5f79d21422ced","sha256":"9ee09f0f2579589aaa4686bf45ac1823a220d4da65942edd555fa0af61936847","sha512":"7e3c4e2d1e61f83287ee6e8d4ba6beb89c2b81544905ea7c578ec8c5a5ee8596175eaa2e87f60711e8f770583ac6529220a6bffe1cb77a8f34b606d37920dc05","ssdeep":"6144:uYD4wFsYiSGfKnIKPP6Xm9Gm3MCrn1OSgpozfEe5a:uYD4wFsYiSAKLJ3T25","tlshash":"2924e8a4f294f1bd075fc1f1d23b501ab35b5e6120cc9ca0d296e6942e20b49da77eec","first_seen":"2026-08-02T09:02:15.029932Z","last_seen":"2026-08-11T10:23:49.15278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":911,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/js/index.1785390737670.4c6795bd.js","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:57.710Z","timestamp":1786443777710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /js/index.1785390737670.4c6795bd.js HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 05:56:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6ae7aa-1caee\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:58 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117486,"size_decoded":39414,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64686), with no line terminators","md5":"0182254656634d47788518980f5d0fcd","sha1":"0515a46084362b6ec521c4d57b838bcb3f59de0e","sha256":"457ef3da06b5c67a76c0409f0944da6079309791fc603cf634204cd6dd4648fa","sha512":"b059d870a448b71548496f389075595532a5bce7afb4fec2a6cfb20c7f7f2e3c43acb1c2ada67f43b501040c3755e1709c6135c945da9149c9af3c65fdbfbf12","ssdeep":"3072:j2ZlLazp51s5El8mj+qmninYzFEC5yqjN6b5Np0C:j2ZlLazp51s5EuiYzSSPj2F","tlshash":"43b31ae4b2b8f1b4539f467bb3323468502e1682a0cadca4d3e95ed4bf55385fc314a9","first_seen":"2026-08-02T09:02:15.110236Z","last_seen":"2026-08-11T10:23:49.153656Z","times_seen":2,"resource_available":true,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":944,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/assets/logo/favicon.ico?v=7/30/2026,%2013:56:58","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.205Z","timestamp":1786443779205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /assets/logo/favicon.ico?v=7/30/2026,%2013:56:58 HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 18755\r\nlast-modified: Fri, 20 Feb 2026 15:57:01 GMT\r\netag: \"6998844d-4943\"\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncache-control: public, max-age=2592000, immutable, no-cache\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18755,"size_decoded":19099,"mime_type":"image/x-icon","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"790e490814d2d6ef67ae996dfbc5380e","sha1":"77462935e3783ad4e28097d98f5de990b3170a3b","sha256":"14ee7c77ba361b0ba2bd0067fef6b39a671132d7c611fb73ebe43778d22cfd52","sha512":"4f4298b1432b415366e9cf232e121fe6b0a574dc2f78d887ec0fe78898bf30c9a3eacc800b3ab979853b015751b1d2bdad78c4618ca75f7000cba9634a298d9b","ssdeep":"384:/nVyjSjXCNBAJYcqXCOyaisnJHaZdutnm9hv+f3rCICdmRQkm9:/VtTCNBSfqNya7nYMm99+WtRP9","tlshash":"e282e1aa3c21b7a94e9d7e306fa90442585178c15b0b56c24c9897bd50dea0e2ebe933","first_seen":"2025-12-26T13:35:11.15455Z","last_seen":"2026-08-11T10:23:49.122888Z","times_seen":61,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"134.122.214.215:3156/img/loginPop.80589774.png","fqdn":"134.122.214.215","domain":"134.122.214.215","tld":""},"ip":{"addr":"134.122.214.215","port":3156,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://134.122.214.215:3156/entry/register","date":"2026-08-11T10:22:59.324Z","timestamp":1786443779324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"134.122.214.195","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:34:FC:71:8E:A4:33:16:DB:95:D1:27:E4:E1:78:49:F2:7C:B3:82","sha256":"C8:6C:A3:B7:7E:54:D9:90:B8:4B:0A:76:E7:30:7C:86:69:B5:C3:E3:AC:12:D8:D8:59:05:FC:CB:03:0C:85:84"}}},"request":{"raw":"GET /img/loginPop.80589774.png HTTP/1.1\r\nHost: 134.122.214.215:3156\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://134.122.214.215:3156/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rcCode=ck1p\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 11 Aug 2026 10:22:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jun 2026 09:58:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a439348-2519d\"\r\ncache-control: max-age=60\r\naccess-control-allow-origin: *\r\nx-custom-check: true\r\ncontent-encoding: gzip\r\nexpires: Tue, 11 Aug 2026 10:23:59 GMT\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151965,"size_decoded":152374,"mime_type":"image/png","magic":"PNG image data, 807 x 1112, 8-bit colormap, non-interlaced","md5":"3f67ba41b3ef2238eb6a7f4c375a1eb5","sha1":"d58772c5cee7971ac3c39da9083dbe5b925bc13b","sha256":"f663ea1f38c45e3726cc7a125208caabdbb9f0730ebfb79a4c34f0e7258e398e","sha512":"c387cce9422b71b73f7c3a56a0699ef618a52fafa08031bc0c24976f9037f2a9cf3926d4c8b9b98ee295a4d2772bc8c72ecd9093a49aea49cf9cff6121a4bc69","ssdeep":"3072:CCjBaa0KqjUeDJSDr9nZswL+qZz7lhH//weWFjnkc7P8giXjJ:/BaEetkr9ao+wfIeWFzkGP8giV","tlshash":"f9e312e1d4977d41d2d7e2bd5186b36830a70ea72e821e05f6d17b829b10c6b840ef9e","first_seen":"2024-05-28T10:43:33Z","last_seen":"2026-08-11T10:23:49.154636Z","times_seen":853,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}