{"report_id":"43b1d271-50a5-4478-ab35-3535ecc9bead","version":0,"status":"done","tags":[],"date":"2026-09-26T13:04:08Z","url":{"schema":"http","addr":"88fa.cn/","fqdn":"88fa.cn","domain":"88fa.cn","tld":"cn"},"ip":{"addr":"116.204.239.17","port":0,"asn":18450,"as":"WebNX, Inc.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"88fa.cn/","fqdn":"88fa.cn","domain":"88fa.cn","tld":"cn"},"title":"短链生成器 - 免费网址缩短服务 | 比短更短","dom":{"size":39555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"70d9a382234f85bf59c4ced214abc9ee","sha1":"a44d6c66b4354cd13edc2bbfd7f2dad411d62af0","sha256":"8cacae8814fa62d30aee5d0f282f516ef9c702a42ca76f570071081bf0ae794b","sha512":"0e3eb604bad1813189d510da2950c585e692e97801b80c3502c39b88cb92e40be1854e7062d85d9f9602b76bea9179400d85423012509bd6c126b0e50bd2f1f7","ssdeep":"384:7v6Ud+5Fy2qpnLE1Tq+Nbpnwz8Ft83DO3mt9GQOu:b6Ud+5FrqtKbJ8gnQOu","tlshash":"7103735a78f32072695bb0795bbf4b4a3ab0e003cc06ce257b9d57988f85f945d93388","dom_hash":"domhash5da2db74ceef3ae1fda05b792c132c39","first_seen":"2026-09-26T13:04:10.892662Z","last_seen":"2026-09-26T13:06:15.294435Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"88fa.cn/","fqdn":"88fa.cn","domain":"88fa.cn","tld":"cn"},"ip":{"addr":"116.204.239.17","port":0,"asn":18450,"as":"WebNX, Inc.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-31T13:04:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"88fa.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"88fa.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":3,"received_data":217312,"sent_data":1736,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"88fa.cn","ip":{"addr":"116.204.239.17","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-05-18","domain_rank":0,"first_seen":"2025-08-10T14:07:15.316597Z","last_seen":"2025-08-10T14:07:15.316597Z","alert_count":6,"request_count":3,"received_data":225613,"sent_data":1577,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"88fa.cn/","fqdn":"88fa.cn","domain":"88fa.cn","tld":"cn"},"ip":{"addr":"116.204.239.17","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f49310925890cd24c97086ff566bacfc","sha1":"0e14387835bd716577fef9c395a160ee2a728d53","sha256":"72af25af882a38ba3696e5a6a3fd5dcbe2b297aabdef77f3ad5d78acffd00697","sha512":"12ed7a633e6bef3ad8c72e772db3c45cff88272ffcfbe20faad7cb9944a5fc50c72cca02ae3df3dff32fc4a38c57a404c58e3ccbe568ea5f1a25ac7e3c302dd4","ssdeep":"192:80JjNn/nyi7KU3gTHTwTLjlcW8mjKY5sFQEHCzYkmtqyIl+91DyFQgRW1JkDT:pnwz8Ft83DO3mt9GQO/","tlshash":"8c02309e39f324725babb93f075f8348b572600b1c05ce117e2c8b944f90f961ea6ad5","size":8977,"data":"","first_seen":"2026-09-26T13:04:10.901415Z","last_seen":"2026-09-26T13:06:15.311112Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"DOM loaded","filename":"https://88fa.cn/","line_number":962,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://88fa.cn/","date":"2026-09-26T13:03:40.143Z","timestamp":1790427820143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://88fa.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 26 Sep 2026 13:03:40 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 812087\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Sat, 06 Jan 2024 21:53:23 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90PuQci%2BsI6rMyOKIwA0yNuu%2BZY3qO%2FLGaLlO41j0EB6TOA0kbTs9OrSo9rprMSSfBkIFitgPTBMWvev5FeSjV%2BYoqGt4PpJ6zvrGjyqJZljE3Azw51VXMK8U2YnjlrAt0LMCOd0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4127853fb1c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78196,"size_decoded":79196,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-09-26T15:33:03.000228Z","times_seen":172182,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://88fa.cn/","date":"2026-09-26T13:03:40.145Z","timestamp":1790427820145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.3/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://88fa.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 26 Sep 2026 13:03:40 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 229196\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Sat, 06 Jan 2024 21:53:17 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FRB7Xl6qx%2Bch8%2BijNkkPf39W9%2B8xa50araItB%2FRfNcMZeHnMy7UF7e9k4LLaJ35uwod7q4aroNHqgeVe43Wdr1hRMSuqEZ5Xvv0FoSxnV6o3TIPm4nSbSv0P%2FBAzVMRrDw%2FgPwjs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4127853fb1b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 76764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76764,"size_decoded":77770,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261","md5":"f7307680c7fe85959f3ecf122493ea7d","sha1":"fce0da592a3e536d6d5df5b50cb513398d8c5161","sha256":"43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af","sha512":"d115a6f0df1f766fc83a77adeff79da5b0a463c01c13532cf48f29ed53a0c4ef1d87db38b8e492fbc3f97a0d192a9a6f636b837e65fcbeac03bb6f36336ca69e","ssdeep":"1536:UOsj0gqVLsxxVegJ1MvhvVpBJoY+q6G9NjFvzOCvXHYVSGhZJZ6xxsBV:UOsj3sVgmoYp6uRvzHYYsZJ+uf","tlshash":"8373028a852a583dc7fd1134a83c8ff111fba484c64b178c7a7179847b96fd3b4a51ca","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-09-26T15:27:24.760334Z","times_seen":32030,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"88fa.cn/favicon.ico","fqdn":"88fa.cn","domain":"88fa.cn","tld":"cn"},"ip":{"addr":"116.204.239.17","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://88fa.cn/","date":"2026-09-26T13:03:40.281Z","timestamp":1790427820281,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.88fa.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 20:50:45 GMT","end":"Thu, 17 Dec 2026 20:50:44 GMT"},"fingerprint":{"sha1":"29:D1:A0:E2:B8:CE:EE:8B:DB:70:61:F4:5A:49:6D:2E:53:4D:23:C9","sha256":"C6:C1:7D:40:96:0A:A4:F2:6E:1E:C9:78:8A:CD:D3:32:71:15:0E:92:10:2C:EF:F5:A6:CB:96:AE:EB:02:D9:9B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 88fa.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://88fa.cn/\r\nCookie: PHPSESSID=a925846ce223df6501e95574809d144f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 26 Sep 2026 13:03:40 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.1.33\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1057,"size_decoded":1396,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"89aaf0af86e48d716f8d5001ea824df0","sha1":"bef8462989e1cde752396588b61005ee79621896","sha256":"a3ebeea32ff4aab8bc331ac7d75266f4d2fddea9c733d98bb965adc4a2076300","sha512":"82895b8b82a3b1f2dd6762c6adca541b13947c71e84d1acb6e9e89c0cbf24b8a5d44f7bf7bbbf99a33396a1f8c5c872326431c50a477cab173d02324b748a9bd","ssdeep":"","tlshash":"c411d02245c1150671336260ce53d350efb58187c207667d36cf2297cfbd5029db77a8","first_seen":"2026-09-26T13:04:10.896988Z","last_seen":"2026-09-26T13:06:15.310181Z","times_seen":2,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":0,"dns":0,"connect":155,"send":0,"wait":159,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"88fa.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"88fa.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"88fa.cn/","fqdn":"88fa.cn","domain":"88fa.cn","tld":"cn"},"ip":{"addr":"116.204.239.17","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-26T13:03:38.923Z","timestamp":1790427818923,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.88fa.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 20:50:45 GMT","end":"Thu, 17 Dec 2026 20:50:44 GMT"},"fingerprint":{"sha1":"29:D1:A0:E2:B8:CE:EE:8B:DB:70:61:F4:5A:49:6D:2E:53:4D:23:C9","sha256":"C6:C1:7D:40:96:0A:A4:F2:6E:1E:C9:78:8A:CD:D3:32:71:15:0E:92:10:2C:EF:F5:A6:CB:96:AE:EB:02:D9:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 88fa.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 13:03:39 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.1.33\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=a925846ce223df6501e95574809d144f; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 8311\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"a925846ce223df6501e95574809d144f","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=a925846ce223df6501e95574809d144f; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":40886,"size_decoded":8748,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"d1b9c9c0ffc8ce525c275bcf4220c79c","sha1":"c71623feb4cb8146323dbcbd7fe05dc5821a4a3e","sha256":"bc529f9612a507ce5ea992d83e7ba05a98ff00d5e7ca835643686599dd18d05e","sha512":"3bdc71403977c211a153dd1062acc3a636f53f681a7f5124b5b169130c5001d8a2744b7a358b531551edcc389323899a9cb739f21e97f95abf247370a43c61d0","ssdeep":"384:6vnWRe56w9pRf2uYbvJnslXiG6zunzVc2cHsvk3bC4X/Y:mnWRe56apROwlfXcH9HX/Y","tlshash":"ce03632eb4d06422653be379cbb68b49fee25023c90387257b9e57870ff1d548913e88","first_seen":"2026-09-26T13:04:10.898394Z","last_seen":"2026-09-26T13:06:15.296371Z","times_seen":2,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":241,"connect":151,"send":0,"wait":157,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"88fa.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"88fa.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://88fa.cn/","date":"2026-09-26T13:03:40.059Z","timestamp":1790427820059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://88fa.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sat, 26 Sep 2026 13:03:40 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 220306\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 06 Jan 2024 21:52:53 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnEjNyiP8s%2BajDWABH4Tw0S4TQI1B2Woz94Cbsl6GvxCxueAx%2FNX73UANBENsnxLYYdaO2FN0238b188pgJGGJ3t5ZqjLPEEWXqJBttmRe3ZUYRhBu3zo12xusCyaCElJhFMDR5y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a41278537d260883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59344,"size_decoded":11484,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-26T15:30:23.027684Z","times_seen":117255,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"88fa.cn/img/kefu.jpg?v=1772936607","fqdn":"88fa.cn","domain":"88fa.cn","tld":"cn"},"ip":{"addr":"116.204.239.17","port":443,"asn":398478,"as":"PEG-HK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://88fa.cn/","date":"2026-09-26T13:03:40.067Z","timestamp":1790427820067,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.88fa.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 20:50:45 GMT","end":"Thu, 17 Dec 2026 20:50:44 GMT"},"fingerprint":{"sha1":"29:D1:A0:E2:B8:CE:EE:8B:DB:70:61:F4:5A:49:6D:2E:53:4D:23:C9","sha256":"C6:C1:7D:40:96:0A:A4:F2:6E:1E:C9:78:8A:CD:D3:32:71:15:0E:92:10:2C:EF:F5:A6:CB:96:AE:EB:02:D9:9B"}}},"request":{"raw":"GET /img/kefu.jpg?v=1772936607 HTTP/1.1\r\nHost: 88fa.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://88fa.cn/\r\nCookie: PHPSESSID=a925846ce223df6501e95574809d144f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 26 Sep 2026 13:03:40 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 08 Mar 2026 02:23:27 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 182577\r\nCache-Control: max-age=2592000\r\nExpires: Mon, 26 Oct 2026 13:03:40 GMT\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":182577,"size_decoded":182894,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2018:10:12 08:54:30], progressive, precision 8, 580x580, components 3","md5":"981e9a7377220307c100301643f6661c","sha1":"27e705bd2f928dfc3c9209f103f16e17711bbd72","sha256":"2ad6aa6e8d2dbe72e4fa395339551a44acb38250e875c272c15fccd78052c7e5","sha512":"ac8915b8d0c165cdd78581eeab26c3f57cf4d9a10e0d5daab72b60378bac11f31751e9b7b0b4f410d30d3a4b804ecd7d710951a8ad94e95e80e6d2b8161e9dae","ssdeep":"3072:rqbL8JCqbL8JD12+KqtpS8lzzlfpll0hCjZMNp92V3hprMowQmkdUD/E7m9aiXnK:rqkJCqkJp2hqtp9100V+p0Fhp1LUD/da","tlshash":"3c0402a8b6816e11dcc69e38d1965a5b5233addd3ee3e043785c28323bf1a0552b8f07","first_seen":"2025-11-18T07:56:12.841419Z","last_seen":"2026-09-26T13:06:15.307099Z","times_seen":7,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":151,"receive":452,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"88fa.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-26","alert":"Phishing Block","trigger":"88fa.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}