{"report_id":"49cb21c3-0dbc-43ca-9258-3b7925eebbf4","version":0,"status":"done","tags":[],"date":"2026-07-03T23:55:38Z","url":{"schema":"http","addr":"russianmarket.tw/","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"172.67.218.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"russianmarket.tw/login.php","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"title":"RUSSIAN MARKET | RUSSIANMARKET.TO | RUSSIANMARKET.TO LOGIN","dom":{"size":8159,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (340)","md5":"1639bf7f834bf4afbb43de3127ef42a1","sha1":"f2e6b32272de389f5f0b7f185a491660a06ca176","sha256":"3e958e16c5def413f322f1dc55f6d27071da3ddbed7f8ec57cd4e25929866300","sha512":"4307a646cdbad1a2f2cd42b0911763f6af63738aa000a26ba9310ddeb19530d1550e492cb2d96d2c71b30f8632321fffbb68945ccccea305332bbf6a1dda4b8d","ssdeep":"96:ndTzsre/ZE/MVs0y1nx2Kt4pV0ty1BxsVI2Ze+/WAky1psxdu:dTzsC/ZEUlS2Kt4p6+svPvkoSdu","tlshash":"ccf12320a0f41e72499398e4e691db067a56d203db0b480d73fc1bf66febde24453ac9","dom_hash":"domhash39229b1f8be4784402622c9cdb59197b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"russianmarket.tw/","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"172.67.218.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-07T23:55:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"russianmarket.tw","ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-24","domain_rank":0,"first_seen":"2023-06-02T01:19:51Z","last_seen":"2026-04-18T18:25:16.304496Z","alert_count":30,"request_count":15,"received_data":1223784,"sent_data":7504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/jquery/jquery.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a46fb81762396b7bf2020774a2fb4d9e","sha1":"fb5edd7a663dc8dda7ec10815a7cd82a30fc98a7","sha256":"d30b6114fb9496ae46b2a8cdf59379c8ffdb957534bd1dd73e626c7c61c7e67d","sha512":"40759595b05808dd911075918bdcc32fb91362019bdfca24827043b8e54116e6ebe7362050ec72182b66481f1dc8d4ec4c8942c984fd597659313d71ad60dc33","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:+kn6x2xe9NK6nC6N","tlshash":"378319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-07-21T23:40:04.161385Z","times_seen":61866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/popper.js/popper.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef54b575cf25ba4719d9739bd6cd133f","sha1":"2d698bcb998ab4a9308e974a721d4729c397ca94","sha256":"e4455215f9157d0a4efe38e48efb3d2d8b684a894e3a26c0b0c4d07dcb9c315f","sha512":"6c37d558d4ccd1971aba059b4af352c3d67c0a04edb95200158d551cfc4a83f23ff3e2cf191663670dc2f330ad2f193d495130efd654a9edb3a9ddb2bd73ce94","ssdeep":"384:xmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgR:MLsgyziJp3Db5OxHOxvYD73Y5vQzyL9i","tlshash":"dc92b4cc3294b06643a791a7a0af960eb2339875610e9410f19df2d97c30ef9913bc7a","size":20967,"data":"","first_seen":"2023-03-09T22:43:59Z","last_seen":"2026-07-20T04:36:12.695761Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/bootstrap/js/bootstrap.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28d8f9807a6a9642b279d39101e261db","sha1":"228e91568d10d686548c752dc4f6db96923e06d8","sha256":"f3c0ee1921c89a9d61f463b8802c3508c50054fbd78cf5a7bad8a407c0af5e69","sha512":"cc0e75124c06e1d8b8390f8a6a4f2495efa2ff392cc44d6cca5b5e378503c4f2315408e70213869e2678012a8c38ad32e9b98d668e5243c7edf49ba060648f35","ssdeep":"768:BwYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGj:BwTKktDLmTF8yJL45XtHjoGj","tlshash":"bf43b90a725478b201df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","size":58035,"data":"","first_seen":"2023-03-07T12:03:24Z","last_seen":"2026-07-21T07:46:22.590759Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/js/app.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"488b805c0c160f95d5d2faa571eeb234","sha1":"13f179ac85e7f768f396376fbc759acf6e4f7682","sha256":"5f613763a0c01adf20ae1685518bc0710fbf2f34985a28e7f0a9f6658013206e","sha512":"bee639d5a106734a8ffa4dd719c10d8f99b9737a6cd5f3ac38fee00f90d46f8518599498eb4374ca1a39d4f1a489bf7099458b6f4ab68fe4d429767783764aa6","ssdeep":"768:NJwmpiQkbxVKe2BT8eyWjmtmuZ7AoYT/I2i52ZA52pm52PjMj0K5fZGlfWCWnjNe:9kbHJ2Z8eyWjOmuZ7AoYTw2i52ZA52I8","tlshash":"e413442ae5611267017773b50cbbcb0ef131632f874289177e3e99902f3589da296f9c","size":42919,"data":"","first_seen":"2023-03-09T22:43:59Z","last_seen":"2026-07-19T13:57:55.702619Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"russianmarket.tw/resources/css/app.min.css","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.856Z","timestamp":1783122906856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/css/app.min.css HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 29 Jan 2022 09:59:42 GMT\r\nexpires: Sun, 02 Aug 2026 23:55:06 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJnoNLEy4CcGvtLgh4wSNaibLI1Y%2B9wtu3fhVbfe6z23xQuwidMuMUZp4z1DK%2Flk%2F81WYjbdABB9jdbKO292kK3M%2BVwr5648mVB6y2aDcMqphH%2BXbLt5x3eIu7AyoRsvipdD\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a159d1b7dce6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":336718,"size_decoded":45604,"mime_type":"text/css","magic":"ASCII text, with very long lines (678), with CRLF line terminators","md5":"d7a2aa59d489208df1b17a056c4ce5e2","sha1":"3c09cfbd41e26e8068a81e8a5c05d75feafaeb23","sha256":"ca3b2ee936c7857776cb56305da3840610d9af3e64f16f54bdbecae474bae264","sha512":"18c7a97770b10002e14b5f4d3d23dc45f878bb975a22177352a5abee0e43b59603555fd984d89ee2b44d56ea7d8d80f205d8a85bc3625f477f53bedfb2c2ab57","ssdeep":"1536:+BKViiP8EvPcL2iB2pKOQRxdxb4AESt8gMc1/ENpq0OWkpsI1k/NL6AN36jymyDM:+BIiZewk/NL6AN36m6iX2","tlshash":"74645536e901260951338d0987e2655aebbe4087ce011baebf5f77548fb3bc5c5a2f09","first_seen":"2025-11-05T22:37:07.893565Z","last_seen":"2026-07-03T23:55:40.383222Z","times_seen":13,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/fonts/nunito/nunito-regular.woff2","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:07.277Z","timestamp":1783122907277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/fonts/nunito/nunito-regular.woff2 HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/resources/css/app.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Tue, 01 Sep 2026 23:55:07 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJoAbmXvXrA%2FgTkKnXyABsz5wYCvZxCCf4xexA7DP3S21TBRn84UYsAUfwp%2FLGo3X9y00lS5Znrg2ZOi%2ByomNScrC%2BQDh5pwplusY2djWFvBOvVMbe8NtRqEx1EKMIv1IFei\"}]}\r\ncf-ray: a159d1ba7d15dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":13832,"size_decoded":14678,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13832, version 1.0","md5":"36bac02b43165694aadda55bcc66f09c","sha1":"e6ee19fa1fc3649ba5c92c23eddac12ad534c99a","sha256":"b15ec2ee0f97a121603818f1aeb45d4c46edef4d8a7c5251f1dc0f4feedbf8d5","sha512":"5b6d7460b35a83d1fa4d8d65b6905ddac2f0e57caaae41d57703a5839a7b06d1b6240de2459f8f79ccca1976c78798d5e1f2c8f76bc532ef3f30d95060ed96b8","ssdeep":"192:+/E6tIsEBDbkwsRNDNnMHbMWmGh0iBJ8jcsiwEUMq4sexdr2AMblHB5iPc2BB:mtBCvkfNS7MXvaJ8igj4jdr2nph5iUs","tlshash":"6552cf1b26f8df6abd26a251250e440bce3018b588cacc9f7441353cd980679b3abdb9","first_seen":"2023-05-11T16:22:08Z","last_seen":"2026-07-19T13:57:55.697092Z","times_seen":52,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/favicon.ico","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:07.676Z","timestamp":1783122907676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 14 Apr 2024 03:50:38 GMT\r\nexpires: Tue, 01 Sep 2026 23:55:07 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEEMnggzmXAVL6vKcXkPaDHpJ21vCpyFpg1fFPMlr%2B187l7RL0QaDJ9p4Jwe3UyakTYMGiQp8fXIiJCfzpwKbYklCYiiE8Qtr%2FsoON1%2B4G4rmwC0TmpLiStPd0SR03vZ%2B2UG\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a159d1bcfd3fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1582,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"951c0253f31f362b21327033cea71855","sha1":"4ca6edeec5dd61c090bc8c24225b0e8e2f27e60f","sha256":"d6357738c93017b3c0fc392f4a61d62500cfbc317a1572d63302d235960f641d","sha512":"26ebeba6ff94a001ca4f38aaeced6ed507ae21c4bf11e343d8117099d23a1e93eef19bb1e0bff0ee009ad92cdf12ce046fdfa7ab33586305e5320b34e080f3cb","ssdeep":"","tlshash":"3d21fc77c7894cb9e426037441baee9c90398f232bb87d08519cb979433214b5aa9a05","first_seen":"2023-05-11T09:27:59Z","last_seen":"2026-07-19T13:57:55.698037Z","times_seen":44,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T23:55:05.271Z","timestamp":1783122905271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLEBn%2FlgsjLodgfmfftYE1Doty%2B2Xa6KuHlctdKJ9q0MvbCUgSrxYRsKxZLxitt0dn3KWjkczzDpu4D6uBdl1ZnF9tVnSB4A2FRglVnk7eNUG27RBfXAR%2F5wYiZO6ppy%2BQs4\"}]}\r\nlocation: login.php\r\nx-powered-by: PHP/7.3.33\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a159d1ae8c2cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T01:24:25.529128Z","times_seen":17436789,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":67,"connect":19,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/js/app.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.867Z","timestamp":1783122906867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/js/app.min.js HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Sun, 02 Aug 2026 23:55:06 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hhyEaeIctmK0J9iNuAoeYjySnyNF8b1kI00G2G%2BPkk6Fwmki5KSF0wWDubkPBagAo7dQvcsV3e6L2tvF3vyqyNF%2B1EdnF6cDV3Vg%2B6SwmvDWRzs9fD9esEJYPrq3TCcnwZx\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a159d1b7ecebdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42919,"size_decoded":8477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2231), with CRLF line terminators","md5":"488b805c0c160f95d5d2faa571eeb234","sha1":"13f179ac85e7f768f396376fbc759acf6e4f7682","sha256":"5f613763a0c01adf20ae1685518bc0710fbf2f34985a28e7f0a9f6658013206e","sha512":"bee639d5a106734a8ffa4dd719c10d8f99b9737a6cd5f3ac38fee00f90d46f8518599498eb4374ca1a39d4f1a489bf7099458b6f4ab68fe4d429767783764aa6","ssdeep":"768:NJwmpiQkbxVKe2BT8eyWjmtmuZ7AoYT/I2i52ZA52pm52PjMj0K5fZGlfWCWnjNe:9kbHJ2Z8eyWjOmuZ7AoYTw2i52ZA52I8","tlshash":"e413442ae5611267017773b50cbbcb0ef131632f874289177e3e99902f3589da296f9c","first_seen":"2023-03-09T22:43:59Z","last_seen":"2026-07-19T13:57:55.702619Z","times_seen":43,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/logo/Sykth5hAZr.png","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.872Z","timestamp":1783122906872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/logo/Sykth5hAZr.png HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 29 Jan 2022 15:31:08 GMT\r\nexpires: Tue, 01 Sep 2026 23:55:06 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DchGmZ6qw7EsUs5Qrbo69fjWkd%2FSsDby9BIsB9dlllG2GAyPiYwT6CwIxDqhE95%2FMzl0RhPvsqPmKlweuS1T1zzL3P6oIVVGWmNdX155hsYvIYSQ8jaVWuERm3tltxuuqyn\"}]}\r\ncf-ray: a159d1b7fcecdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64668,"size_decoded":65506,"mime_type":"image/png","magic":"PNG image data, 330 x 172, 8-bit/color RGBA, non-interlaced","md5":"cfd9e26f85b676633be474f835c31e98","sha1":"6ad692e105dac181b4160a42176b4af68b04dbc3","sha256":"322a21a27cdf86b1eb5cde03361ea95c1dc45de42ffaf3a112b8ed14add6d669","sha512":"c68c650e9f4c0865eb300480c9a9d61c0e2e1fa7dbb11e7214d365e168bcb2964b55d5f6cd454e85740b9c1c75e5dde14cb8b25aa8b3e4e8b5c61b0a5689c0e8","ssdeep":"1536:vDcvT3du2GFeeGYHWz52yqqBfZb1mZp07pPGY:7ktu2GwsWt2GR1v7puY","tlshash":"955302fee76d5d9c02fab1e7292c06c974c831119dfe118af702388896dae32534895a","first_seen":"2023-05-11T09:27:59Z","last_seen":"2026-07-19T13:57:55.711055Z","times_seen":57,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/zwicon/fonts/zwicon.ttf?k483k8","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:07.279Z","timestamp":1783122907279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/vendors/zwicon/fonts/zwicon.ttf?k483k8 HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/resources/vendors/zwicon/zwicon.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: font/ttf\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlTTnR0oNBn6zIOjr5FwC6953bS5L%2F%2Bhu0Hmi%2FDYunZlAZSPsUMDjoXM4k8XRv22%2FfBUGDJE%2BVty%2FN%2FBaZLCNgjCBAlZmSzkrgFQomkYNEW6u2weS8AFVwUOgBlbmrvAE6zt\"}]}\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Tue, 01 Sep 2026 23:55:07 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a159d1ba7d16dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":172788,"size_decoded":65880,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 24 names, Macintosh, type 1 string, zwicon     ","md5":"d7e439cec483969db045235b2bd3a748","sha1":"889277e3ba52dfd8942e88d4d923d7eb0c7e777b","sha256":"37e70fc7e7cca0f59657984e08846d8c5d721cbb0a04ef6ecf11facc18d33c97","sha512":"c9c2042c5085716c0cd05db97b493139d50a4a549afcf6c534a812656bdb1acae4c774f84b08d888316df2a7cb4174f6fbae8040f4a1045102edd0dc6d022c85","ssdeep":"3072:9UJSueM8oXGOZm75ZYUigCYjEckXValk2vqO4AutQHfRUl7FWyKMNtwg26Kp4JDc:9UJSueM8oXGOZm75ZYUigCYjEckXValT","tlshash":"81f3e86ff7f7dadac44655eec961e44059eb9f3650be3b263e81100afc1e0d088e4962","first_seen":"2023-05-11T16:22:08Z","last_seen":"2026-07-19T13:57:55.721321Z","times_seen":60,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/login.php","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T23:55:06.035Z","timestamp":1783122906035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\nx-server-powered-by: Engintron\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D640tvucn7bfMvS5knvkaBhFEvOut2qGY2imIO%2BeefiJ20UasOi7UATJAf92PqdfeaKXqFRXrTJwhEvsKW7%2BC8ZrZMUZg8S6HYjcZ3OLgSrCBmzdh7yfEOKxmyMBKUl%2BW0o0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a159d1b2bc7bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":8272,"size_decoded":2483,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (340), with CRLF line terminators","md5":"e9f27fc3708141acddc4a0166e6e54d0","sha1":"b09049c56f2532b665ecdf683b95b2fff2ffbbc7","sha256":"d06154221ab933d61fc17b4ba3e38321f52505f3aff2e2db5d651f0048816f68","sha512":"4ec9b9734162c0e62471a4d2944d24011de95a0850aa6f58d2ab461d46f943f906affd9842dd167f22bd9153846c9956c220324a561faa49bd18b535599ef57c","ssdeep":"96:LT3pkFwozE7VVFSp1y26wRpyVVNCp1bKyVVq2NF/5xp1mwMr:LT3pKzE7VCy26wRpyVKbKyV3/mwMr","tlshash":"7f021e20a0c41e624573a8a5d990db4afe66c203d70b590972fc27e36ffbde14453ac5","first_seen":"2025-11-05T22:37:07.897098Z","last_seen":"2026-07-03T23:55:40.388583Z","times_seen":8,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/zwicon/zwicon.min.css","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.853Z","timestamp":1783122906853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/vendors/zwicon/zwicon.min.css HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Sun, 02 Aug 2026 23:55:06 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbnNP6JqhFqihYvf%2FZgdHViv6FkSX7UnNujJR4g7xA8AetTW3lHBZ4ynWHU0nzGmzdjtr72%2FgobhR%2F2265DwWFnU5%2Bbvg1kKg6R0cruNRZXCTKG9c%2BhIhB6k7kHDW5cFVlWL\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a159d1b7dce4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24180,"size_decoded":5233,"mime_type":"text/css","magic":"ASCII text, with very long lines (24180), with no line terminators","md5":"d7733607daf261292dee9216435eed27","sha1":"8b9d28ed8a4e12e2238aa8113640397c87e39f8c","sha256":"6b1f697aef0fa701091822fc70169f45f508cc3d6cb29c333f16627053f07958","sha512":"43d4786ebde88c868e9ba4d895a690a8eb8b256d82fe1db74f00d4b7f5d9e23a60a8e57b1974f36e5b59e25f65ac8f9e2f8ae311dffd3378eb5afe1ab1bef35a","ssdeep":"384:5ozIGYCOyQwArBmTS/SzDDL7sJ6V5SO0QwWL9:5I2VQB","tlshash":"24b289e6f4ea51d43731c447cb65ea08b09af122decb6d13f0abc50c59f226606c5bb9","first_seen":"2023-05-11T16:22:08Z","last_seen":"2026-07-11T18:58:58.461316Z","times_seen":42,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/animate.css/animate.min.css","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.854Z","timestamp":1783122906854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/vendors/animate.css/animate.min.css HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Sun, 02 Aug 2026 23:55:06 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wpm7%2B%2FLpiLoRuG7OyTuMSKMH4gb2EXv%2BDn5hM2j9hww7gfgpjZ8nK6jQ8%2BBbM8wDcsZf7kX%2Fi0FrJv3NDNlytwDM6k0ReWpZODeCj%2FDGRE76eLjK33HQvhPAXvHCF%2FU8SsP%2F\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a159d1b7dce5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58005,"size_decoded":5366,"mime_type":"text/css","magic":"ASCII text, with very long lines (57798), with CRLF line terminators","md5":"6211a6a66ee42b63bee1aac40ffdcbcd","sha1":"057ef4f85450b21f91c010f2a20fab946683f1f4","sha256":"647e6faf91ada3ddee60adeda49d35678aa0143f3895e769a35b8bf300392942","sha512":"6b4af5ed8f32f1d0d02ef6d2e981fe0915555e9962aaa2fb0223ac77e3bda073045c14a6106bffedbe410e42446ca08a130768cc846960a545167496d86059cb","ssdeep":"1536:nkZTl+wI1OAvkqDb3ay25FrCes0+Tw6j3rwzlr2e:nkZUwI1OAvkqDb3ay25FrCes0+TO","tlshash":"204317af4892229951230f67c7cd5ea8872dc66714721dde33862c4b8b46f9e33cb617","first_seen":"2023-05-06T03:34:34Z","last_seen":"2026-07-18T01:30:24.732849Z","times_seen":112,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/bootstrap/js/bootstrap.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.865Z","timestamp":1783122906865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/vendors/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Sun, 02 Aug 2026 23:55:06 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I98YZsCpp67HBxFGD9gfRxUZzUSJm5V2n62pkzt%2Fz0RJEM9Cs5v5KZW6tPO157ws9Pj%2BK1S%2Bx3P%2Ft7u9257BvCmFcVodaFqEYttU61TuUuwOqljbZbJ61Tabq7gEcU2ZNXh6\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a159d1b7ece9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58035,"size_decoded":16447,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57791), with CRLF line terminators","md5":"28d8f9807a6a9642b279d39101e261db","sha1":"228e91568d10d686548c752dc4f6db96923e06d8","sha256":"f3c0ee1921c89a9d61f463b8802c3508c50054fbd78cf5a7bad8a407c0af5e69","sha512":"cc0e75124c06e1d8b8390f8a6a4f2495efa2ff392cc44d6cca5b5e378503c4f2315408e70213869e2678012a8c38ad32e9b98d668e5243c7edf49ba060648f35","ssdeep":"768:BwYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGj:BwTKktDLmTF8yJL45XtHjoGj","tlshash":"bf43b90a725478b201df9176917f420bb737688ae94ac16cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T12:03:24Z","last_seen":"2026-07-21T07:46:22.590759Z","times_seen":493,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/captcha/2.png","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.874Z","timestamp":1783122906874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /captcha/2.png HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 14 Apr 2024 03:49:37 GMT\r\nexpires: Tue, 01 Sep 2026 23:55:06 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwSyHXDUFMzrqsAAsOOwIBGsjGkI4%2Bu3AuQOLVlZUwIacE3wYWvHGP7vAjH%2FapONpDNp%2F6nPcY1uE%2BIzoIQOAGaD22CQnTM9LnMl9gT3uP9xImODWT8L9r%2F0EKgF103Bnem2\"}]}\r\ncf-ray: a159d1b7fceddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2109,"size_decoded":2952,"mime_type":"image/png","magic":"PNG image data, 100 x 32, 8-bit/color RGB, non-interlaced","md5":"af94e889a8b617ab3522712944b560e9","sha1":"9fdc0fe07590b8509997329ef3e853929230bdd0","sha256":"cb71a2a09dd2112f3813a5a9b2d2c8280b6b6d627b5291ee668902d55f1c01e4","sha512":"e122c59b7e7ba7eb3ac9bd13b8cfd763bbd5fc70195953002475c36413c59a4e03dd8151ee6a23d25e481ea1435da765dca59bc77ae9dd3766ffc72241f4975e","ssdeep":"","tlshash":"7f413ce7b657ed168716d58df82e3093cf9086dc4f347352254df6a3163191ad423386","first_seen":"2025-11-05T22:37:07.885715Z","last_seen":"2026-07-03T23:55:40.392142Z","times_seen":13,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/img/bg/2.jpg","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:07.242Z","timestamp":1783122907242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/img/bg/2.jpg HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 29 Jan 2022 15:33:34 GMT\r\nexpires: Tue, 01 Sep 2026 23:55:06 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iicr5koKRnLgJIq%2BKJIRSm04BFMbSJ8sTn3C9z1VrbD8QRkbdhO22VFufCKp02e5XfWNqkV79Qio1PyDDon3JdDI4yLIq8qi%2FhHEfP%2BzyND%2Fv8uoLbyquhmuwRDh2XrYeWM8\"}]}\r\ncf-ray: a159d1ba4d13dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 320646\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":320646,"size_decoded":321490,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"d070c366238a8aa23a0024b5f55c32ba","sha1":"789c56f0de492ccf3bbcda322394bcf540373526","sha256":"9fcd3f5e0da2568d0f029edff47279e211bd0fb7cf2c0e9a2f565a5ba8942375","sha512":"ed0b169f5823df8da6cd7faba60ad9100a6929a92e768e9111d260f3963be83ec654498367fe8fe1bdefb52eecb8f7cc529fc46ffc4241190e8c0c4225d8513f","ssdeep":"6144:GVqF+A2t46fxb27lgeCTLz1Vj8i5k0LRiMYQscYOOcWpStEH5o51UKAg2T+lSv:GAwA2t46fM7x21Vjn1/nOTStEH5o1AgQ","tlshash":"eb6423243085f6127a6b96f40c94fef665bc3a79a670880d7418ed164b33d3b9e222f5","first_seen":"2023-05-11T09:27:59Z","last_seen":"2026-07-19T13:57:55.720038Z","times_seen":53,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/jquery/jquery.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.858Z","timestamp":1783122906858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/vendors/jquery/jquery.min.js HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Sun, 02 Aug 2026 23:55:06 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mKq3DLOzomO7I273pEmHWWmq%2FBonnM6oJnJYP1miGwwCnvwCx%2FPo4sJ6je206jk2s43kEmexyl4HoKiiGWR%2BxGqRzAflWJFnKS6AN3Qb5uPAXMrqBw6lXxm5bG997f2%2FveJ\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a159d1b7dce7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":86927,"size_decoded":31405,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a46fb81762396b7bf2020774a2fb4d9e","sha1":"fb5edd7a663dc8dda7ec10815a7cd82a30fc98a7","sha256":"d30b6114fb9496ae46b2a8cdf59379c8ffdb957534bd1dd73e626c7c61c7e67d","sha512":"40759595b05808dd911075918bdcc32fb91362019bdfca24827043b8e54116e6ebe7362050ec72182b66481f1dc8d4ec4c8942c984fd597659313d71ad60dc33","ssdeep":"1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:+kn6x2xe9NK6nC6N","tlshash":"378319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-07-21T23:40:04.161385Z","times_seen":61866,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"russianmarket.tw/resources/vendors/popper.js/popper.min.js","fqdn":"russianmarket.tw","domain":"russianmarket.tw","tld":"tw"},"ip":{"addr":"104.21.17.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://russianmarket.tw/login.php","date":"2026-07-03T23:55:06.863Z","timestamp":1783122906863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"russianmarket.tw","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:06:03 GMT","end":"Fri, 04 Sep 2026 13:03:31 GMT"},"fingerprint":{"sha1":"BB:70:96:2B:9B:D9:3D:65:DD:AA:21:BA:24:46:2C:9D:13:44:59:36","sha256":"24:0E:6F:4F:DE:1D:59:33:94:01:83:49:3C:95:FF:43:B2:98:47:58:D0:99:27:55:AA:09:9F:2D:3C:CB:B0:56"}}},"request":{"raw":"GET /resources/vendors/popper.js/popper.min.js HTTP/1.1\r\nHost: russianmarket.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://russianmarket.tw/login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 23:55:07 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 08 Nov 2021 18:04:30 GMT\r\nexpires: Sun, 02 Aug 2026 23:55:06 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zxtFproOGrCJpN1CFTf9rdrMXFyw8xrAAmABK%2FAoZ%2B722%2BOqS1MEibIkF%2BtbQENTsc5VRWPAzcWN%2FnpLskN0TzmD1oi2GYcvYiLEWoY%2FliF%2Fb40VaIc4FAfP81NSTRrfmGn\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a159d1b7ece8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20967,"size_decoded":8308,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20831), with CRLF line terminators","md5":"ef54b575cf25ba4719d9739bd6cd133f","sha1":"2d698bcb998ab4a9308e974a721d4729c397ca94","sha256":"e4455215f9157d0a4efe38e48efb3d2d8b684a894e3a26c0b0c4d07dcb9c315f","sha512":"6c37d558d4ccd1971aba059b4af352c3d67c0a04edb95200158d551cfc4a83f23ff3e2cf191663670dc2f330ad2f193d495130efd654a9edb3a9ddb2bd73ce94","ssdeep":"384:xmQkLrwVOyzirVyKnxRsIB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdOgR:MLsgyziJp3Db5OxHOxvYD73Y5vQzyL9i","tlshash":"dc92b4cc3294b06643a791a7a0af960eb2339875610e9410f19df2d97c30ef9913bc7a","first_seen":"2023-03-09T22:43:59Z","last_seen":"2026-07-20T04:36:12.695761Z","times_seen":200,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"russianmarket.tw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}