{"report_id":"4b3a4521-f180-4be8-83a1-460c1b181634","version":0,"status":"done","tags":[],"date":"2026-07-13T01:01:07Z","url":{"schema":"http","addr":"nomura.vip","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"http","addr":"nomura.vip/#/","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"title":"野村證券","dom":{"size":27728,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20193)","md5":"83044846c5830819ae855e9ab09df1ab","sha1":"55ae2b83213227b3185bf47d3cab99a915eb1cef","sha256":"e847fb1134ac0963d556e05c0922b2d0c993ea2004c9629d37765dcc754ba2e2","sha512":"bd99449d5c3a71ab676d056f51030d8f96a30bdd9b43dccb1b76b59b97c47b4cb50b831c67e97e36e165a979974d363ebb9c580100eade27cf26995af75f5dc2","ssdeep":"384:33owbL4Usp65+x7/xVP8b8hvY5jahiP3aFQRCbx:nowvKp65+xdib8hvY5jahiP3aS0bx","tlshash":"81c29e28734910222767a4c1a5b0be2533e1eb87d5255ded3aac97640fe2cbff42e474","dom_hash":"domhash46d6e2e20d56d13bb81e28c27adc7ee6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nomura.vip","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":0,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T01:01:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-10T17:30:37.560622Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nomura.vip","ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-07-13T00:24:39.90541Z","last_seen":"2026-07-13T00:24:39.90541Z","alert_count":38,"request_count":19,"received_data":3438556,"sent_data":7761,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"nomura.vip/","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a4389d2fb81b0c13728cbeb4dbde294","sha1":"a1d5a77be03d0ba85ce267732a87cddad56a150b","sha256":"e01d18e732a17074e9e171b1a9a2450849820475e63b57884ee6d5efa37ccf0c","sha512":"51beb47c550837378ce90d1bfcf7d9e32edeb0845146966adc55bd3a6caa30abd3fb8e0db0bb6f039894df052569f53612e9f066907d39d6fe85b8b48495fc4b","ssdeep":"","tlshash":"c0e0c083a0bf3a4c0220811a304ac0076bbe08b2ef864d610c9c3ba5cef9f4fc56d859","size":356,"data":"","first_seen":"2025-04-11T12:06:40.284619Z","last_seen":"2026-07-13T06:52:47.351441Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/index-D7kaRCXe.js","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa9778613e7a20e4295261d7e46fa7fd","sha1":"f59bbf196f8c8e740191e73478b6ae0f23ac969d","sha256":"ef267fb110125cc5cd39194c1dfa8402c3fa1264c875f779de414207bb96780f","sha512":"ac90c4b1d34fa213df8ad7deb7e794fba19281dced2e0fd337027d16af82fc844c689e778c4a52f89acec7bfc651ce58e0d2619ee4bbce7f8569ddf98ec84eef","ssdeep":"24576:TUOj28oNQVNcKkQzdh8O+Ie+mx7FJQcD5gUA6Jttq1PflGw7c+DNCstPp/NVqoN8:wOj28oNQVaKkQzdhD+Ie+mx7FJQcD5gK","tlshash":"f0652b9cb654b03543a721a1117f050ba33a190db40b85a8fb69e8de6cbd44f727bf78","size":1415903,"data":"","first_seen":"2026-07-13T00:24:44.504273Z","last_seen":"2026-07-13T06:52:47.352123Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/pages-default-index.o9jPLYsP.js","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6f3da74d6a59c0064b4714f08cd2a60","sha1":"03e03273d206d8306d7fadf22011d1d8a3a82b8d","sha256":"3197506a83c4459d61f217e56b70a7be1edaa44bab82a48f37bc0f0ce9768686","sha512":"279a8c166df9924b1bc1565f6a7a8c75d0164a90b190b65a281f41ad9c739b2be076f3f33f5c07dd1ed428e549910c4d59cfad41e6d20dc95f45a30a0fd048b0","ssdeep":"384:7+BwQRNQPRP3C9km5YxXnQLAz5MAVVRoNFM/aGHVP4EOrH8sM2m6FAe8IWcMmrR3:7JpnSAic/oXMSYW178sM2m6FAe8IWcMC","tlshash":"b5a20d1cda56db3ea82f4112b10a381030110fe7d6509d6725fccda9af56ebebb05a78","size":22562,"data":"","first_seen":"2026-07-13T00:24:44.490003Z","last_seen":"2026-07-13T06:52:47.34161Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","size":91,"data":"","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-07-13T06:52:47.342228Z","times_seen":1708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"nomura.vip/assets/uni.8808b562.css","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:40.417Z","timestamp":1783904440417,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/uni.8808b562.css HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: text/css\r\nLast-Modified: Sun, 12 Jul 2026 03:58:47 GMT\r\nAccept-Ranges: bytes\r\nETag: \"4c3263bdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:38 GMT\r\nContent-Length: 13291\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":13291,"size_decoded":13548,"mime_type":"text/css","magic":"ASCII text, with very long lines (13290)","md5":"5f2869db519561bbf79ca14269395754","sha1":"fa4cba42c3c4af0ea9887f28818dd55a8ca8e1b0","sha256":"8808b5620c7d280aa34d55c9e6f23a909003afaf395229a3591af785c4384bd6","sha512":"cf59b7687ae41b0fc1cdec1989573d67c6b82069f79edfb9f5107364375ddafb45478f17f0cc9b754d197d615b909bfff87e3471e46240990dd511228a8f72e4","ssdeep":"192:Ujj8LGJ0CQLnWL9iNXVA8I+l+Qb741FN2TZ2ED/Phd:UXpmLWLN8jHlZVBd","tlshash":"4352b6319e41162ef427cf2621d1cb4f22328472d9a32b1dab793528cfad4c9197f785","first_seen":"2026-07-13T00:24:44.478396Z","last_seen":"2026-07-13T06:52:47.338975Z","times_seen":4,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/apple-touch-icon-Dpkqg_5t.png","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:42.557Z","timestamp":1783904442557,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/apple-touch-icon-Dpkqg_5t.png HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/png\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:41 GMT\r\nContent-Length: 8474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":8474,"size_decoded":8731,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit/color RGB, non-interlaced","md5":"e4c4492c7b6d4cb2ae1f2584381ffdc6","sha1":"8f8bbc5e0118b1394f1c74c40b10a710b4db7385","sha256":"aace73de3d52b6cfee2807640ec4b609714a17e13e2a34be60e8ba04aa257aab","sha512":"755ba2aab16338f2c9ee1f1e61860dd212723f15880dc12e85bb967220453d1198c58b7f964dbf2ebe2109050ab3b87309245c39435cfebed9e4d703287d3648","ssdeep":"192:hhRMtmYFOTCnpPW48SYdp41yTckoIBN0lV8vF+dC:hs8Yp9pRYdI2Sj1C","tlshash":"4002aef253ed38f8eeeb9e4bdf12699c61d189b1861450d4c811133e14dd7ae98a4734","first_seen":"2025-05-04T15:54:18.038745Z","last_seen":"2026-07-13T06:52:47.34065Z","times_seen":26,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/nv2-B57lYH6k.jpeg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.915Z","timestamp":1783904443915,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/nv2-B57lYH6k.jpeg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 110093\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":110093,"size_decoded":110353,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"982dc54d59477b4768594f1eb2313b82","sha1":"2ee00d9aac939c2ba7bb2add051c814e2df39ffa","sha256":"dc325fbe68b3980395c3150d89c893aa69860dc5a0c3df03dacb7c1f4ef25add","sha512":"32d26c12f5146db460306400a0dd54487812a2aa4a04d4d3bd1a27f453beccd0a7dca3ec554e7c4cf4a07bcaa90097f6ee0dbfe88febfe953bc390e237b1aa70","ssdeep":"1536:U+nTZjWbUGHMwdDHTyGjYQB2r5DeYcnzwSKD6lg1tA7ALcYfyoL+EqkLsWk6dNYW:zThWbUGHFPxQrynzwS5OAcyoKEmWBh","tlshash":"80b3121f039d1684f5916be01cd537f7c8a04b1a7f9a4485a41a11e3de3f288ebe0eb6","first_seen":"2026-07-13T00:24:44.501226Z","last_seen":"2026-07-13T06:52:47.345812Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1003,"timings":{"blocked":-1,"dns":0,"connect":362,"send":0,"wait":333,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/nan1-BZuXG4uj.jpeg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.916Z","timestamp":1783904443916,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/nan1-BZuXG4uj.jpeg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 103480\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":103480,"size_decoded":103740,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"6cb3ef6ceefa2b7da522e101c546dff9","sha1":"3b37003c27b39b225189dbcf30cc125426f27820","sha256":"7328850dff41be15d5cc2fd44175d1c9242b9410dcb1368f2a8712c51c57bd62","sha512":"587f96926578c557a8329b7f6fe19b093aba75164c03acf425e3bf18b714201b4fb8686040d574280edaa3f43f599569e2e4bbb9e9f7e59cd619f2ae148f4bfe","ssdeep":"1536:UvK2ajPHuSqS/glwVM+2VVA9095kTTdbOjPlOZBOEcTCg6iXpCfVedU0CR3XSa7s:0K2aTFqiDMxV5zkVbOCEogfXYVHP0Lb","tlshash":"dba3028b9752f6b5b5feb3f1023b5f64e96a638f92ec370562e304e22ae8c553540305","first_seen":"2026-07-13T00:24:44.495754Z","last_seen":"2026-07-13T06:52:47.3471Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1721,"timings":{"blocked":358,"dns":0,"connect":0,"send":0,"wait":387,"receive":976,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/img_main-DwM2iHAt.jpg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.911Z","timestamp":1783904443911,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/img_main-DwM2iHAt.jpg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"90d54dbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 1085404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1085404,"size_decoded":1085665,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 2732x1412, components 3","md5":"e70f325b4c7ff915300777dac6e45b8c","sha1":"e97a84c068db6fc074d53eb96d6c6a2bad6edbca","sha256":"7f05868d6d8ef09d83d2b8f43c3b6cc80c0570be6f5e0f8e068ad3b796a27b6a","sha512":"e9bdc452ac888f0dc3d54c1994f288de50109e1c5364957e7c398f6843dfe4f9c6123b28dfa27130b50607188b9f21bb68a3ca634d59326be1012fdfd531834b","ssdeep":"24576:dAP0TMMkmvwsf7PDpocJujkCuLow6IBmyhdk5:C2IuPDucrCK6IBphdk5","tlshash":"492533243195ffe4de720a3ac693f989f8b5b67787e006cd01c18746c8278eae18d587","first_seen":"2026-07-13T00:24:44.492778Z","last_seen":"2026-07-13T06:52:47.345284Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":1591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nomura.vip/","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T01:00:36.810Z","timestamp":1783904436810,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T06:17:49.943222Z","times_seen":17206107,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T01:00:39.739Z","timestamp":1783904439739,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: text/html\r\nLast-Modified: Sun, 12 Jul 2026 03:58:47 GMT\r\nAccept-Ranges: bytes\r\nETag: \"4c3263bdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:38 GMT\r\nContent-Length: 2103\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2103,"size_decoded":2360,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, CR, LF line terminators","md5":"7503b63c6a64cf41a00e497d751fba34","sha1":"4d07e4a5a42d5710195ec2bb2a717eb369bff00f","sha256":"451c495a6b5d781ae17be9ba7e5fd28f588001620b1ed09987b3aa82fc4b06fd","sha512":"bac949233ffeaed9f4c2d69ab62c3d3933384e7c8408efb175e54253ccf9d9442f148d4710ad681b719191630eb7ac1bc409f9b8fe8a0120b484351d98fa754d","ssdeep":"","tlshash":"c841624fb190aa0902318306a46ea08953a78e64fa561c2239adf17f1fd0b89c17f876","first_seen":"2026-07-13T00:24:44.49921Z","last_seen":"2026-07-13T06:52:47.336018Z","times_seen":4,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":3,"connect":280,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/index-O0mPq0qT.css","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:40.421Z","timestamp":1783904440421,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index-O0mPq0qT.css HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: text/css\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"e2a153bdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:39 GMT\r\nContent-Length: 75151\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":75151,"size_decoded":75408,"mime_type":"text/css","magic":"ASCII text, with very long lines (57416)","md5":"4458559c2833157cbaa1b897fcdc5d01","sha1":"eaaae3b035c842ca2cbba4389fa55122fc547448","sha256":"427820ae186397b0563ef0b45e3e0c11e40a8cd89ca1bb24c6ce10cb293fa4ff","sha512":"37b4f30efbdde5bd5ab2ef27579c838b250270c6ad8694eb51a3b0f1ac8297ceb66bb8b250bfdac2cafa13532e186013766a2b202cbabc63ede7076765c987fd","ssdeep":"768:oDpO7Unfh17TvTP10yCm2kQ2WXM4QxHASKDNIsY+9DfBu/qJbboJZgdXX:o0KP10y2wsY+9DfYyJ3pX","tlshash":"db7375a6f240383ebcabc6997554fefe862a7541cb120e59f103376493c9ae70d619cc","first_seen":"2026-07-13T00:24:44.482462Z","last_seen":"2026-07-13T06:52:47.33669Z","times_seen":4,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":309,"send":0,"wait":284,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/pages-default-index.o9jPLYsP.js","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.561Z","timestamp":1783904443561,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/pages-default-index.o9jPLYsP.js HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"e435bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 22562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":22562,"size_decoded":22832,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (17708)","md5":"e6f3da74d6a59c0064b4714f08cd2a60","sha1":"03e03273d206d8306d7fadf22011d1d8a3a82b8d","sha256":"3197506a83c4459d61f217e56b70a7be1edaa44bab82a48f37bc0f0ce9768686","sha512":"279a8c166df9924b1bc1565f6a7a8c75d0164a90b190b65a281f41ad9c739b2be076f3f33f5c07dd1ed428e549910c4d59cfad41e6d20dc95f45a30a0fd048b0","ssdeep":"384:7+BwQRNQPRP3C9km5YxXnQLAz5MAVVRoNFM/aGHVP4EOrH8sM2m6FAe8IWcMmrR3:7JpnSAic/oXMSYW178sM2m6FAe8IWcMC","tlshash":"b5a20d1cda56db3ea82f4112b10a381030110fe7d6509d6725fccda9af56ebebb05a78","first_seen":"2026-07-13T00:24:44.490003Z","last_seen":"2026-07-13T06:52:47.34161Z","times_seen":4,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/nan2-BDQVYKAM.jpeg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.913Z","timestamp":1783904443913,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/nan2-BDQVYKAM.jpeg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 115472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":115472,"size_decoded":115732,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"8b6c70a47084fb93030cfd4370de8af0","sha1":"2281e8f5780d22f1835cd57879268855590ffd61","sha256":"ffff45b589d6c8758fd26521580ed103a26ea5250232172f1678e237646f46e5","sha512":"5b5a95bcb7ec2f8e7627de730e70b816b9fb84532ff4b0304fd7b4f7b62336d74125ea2ce62bc0abc64b0eb80d163d777be943835242240248eba21123d384cb","ssdeep":"1536:UWrpVG87ghk+XpdYxkq6xijBLaAtd6h62F6z3vhH8Udhd1yGAM+cvE9DlLKrIH79:FQOghkoxijBL/E6LvhHddhCmMQMHGXU","tlshash":"9fb312950ec7e5c2ad35daf0ec6bce0cb047d808275f5eaece52b6ad25e311056904eb","first_seen":"2026-07-13T00:24:44.485864Z","last_seen":"2026-07-13T06:52:47.35095Z","times_seen":4,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":345,"send":0,"wait":338,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/index-D7kaRCXe.js","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:40.419Z","timestamp":1783904440419,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index-D7kaRCXe.js HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 12 Jul 2026 03:58:47 GMT\r\nAccept-Ranges: bytes\r\nETag: \"c04364bdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:38 GMT\r\nContent-Length: 1415903\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1415903,"size_decoded":1416176,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31259)","md5":"e58e5601c0505d9829aca23658f40491","sha1":"cdb64dc6d387c06827cdd17c26e89a0e9fdf7a13","sha256":"da694de12c72531bce233dfa67317f3a54c0a803eda4d4df27dd7f41a7e434aa","sha512":"731f1027fc0d4b32ac801300246bd40835d6318e360853af624a151b9971259e055d393f41a46f63a18b9fffd9e23d726416746a79a665b0767d6a39fc3e98e7","ssdeep":"24576:TUOj28oNQVNcKkQzdh8O+Ie+mx7FJQcD5gUA6Jttq1PflGw7c+DNCstPp/NN:wOj28oNQVaKkQzdhD+Ie+mx7FJQcD5gL","tlshash":"1b353a9c7255b03643a725a1407f050ba33a590db40b85e8f66de8de2cbd44e62bbf7c","first_seen":"2026-07-13T01:01:10.995612Z","last_seen":"2026-07-13T01:01:10.995612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":2604,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/index-xX9nJsWj.css","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.564Z","timestamp":1783904443564,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index-xX9nJsWj.css HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: text/css\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"e2a153bdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 18146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":18146,"size_decoded":18403,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (18075)","md5":"5fe9c388b24dba74627c7f6a1058bb87","sha1":"9e489390f0c7cb53ac6e6af2cf74129bd13efcbd","sha256":"25dee8544cd9f1d731fa9b15acec19e6f5ceea91445bdee5b21ad33318261ead","sha512":"ffd8c6ba001e8a59f03373abd9dc96346bd1a99a698fb3c2eb73cc02d023b9d0da7df71cec601967c9c6734a36ae63f399957bbaf7749b4c20457273be19752e","ssdeep":"192:Bg+bzJbNdQvVTfJjIkQJYZeQaSHf0n5J9il/8dA2hy+hTVhH+NLw:uiuTfrt0n57il/8db9deNs","tlshash":"1f826461b38c20187237f115a6e1ea6b23b5e61392521eddaa517736cdc34ff263f248","first_seen":"2026-07-13T00:24:44.491431Z","last_seen":"2026-07-13T06:52:47.342785Z","times_seen":4,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/logo_wm-5TFHdQdP.svg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.912Z","timestamp":1783904443912,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/logo_wm-5TFHdQdP.svg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 10289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":10289,"size_decoded":10551,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0439dfe37987a3003a436a3cdd670d17","sha1":"3a2df37fb8657c217c956419220a59287a98dbb4","sha256":"0581280c10aba5db0ecbc146b3021fcc4bd34dcdbbbb442a3b0a5beff12d410c","sha512":"dbafea44b0115126d3f2cce869030eec0b6a22842f46703c27d04435e0cc3f262c380478fe26c509179f6322aa42daa67e4f83f2d04fb3eeac3c5c9e51719eda","ssdeep":"192:xuTFJ9mUyizbyXEfgKJA63l2JDjbjPjcSlmH3WT+tF9vNaAn/p2pdt:sTFyqzGXEfxB3c9jHjjmH3WTsF9NaE/C","tlshash":"3e2294ec1b7487f499c677fa4f5584d47e2535f66b49863cc7a87e89a00a0ac0d82cc5","first_seen":"2025-05-04T15:54:17.987215Z","last_seen":"2026-07-13T06:52:47.343977Z","times_seen":26,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/nan3-BHeRXXyw.jpeg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.913Z","timestamp":1783904443913,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/nan3-BHeRXXyw.jpeg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 108453\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":108453,"size_decoded":108713,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"8db95b6a073ad43caaac21891f07766d","sha1":"e959da2ebce48beb1c73e6e27495701623e42749","sha256":"3f28d5cbb725b4e3ed228c4039cea5563cb4435f420c844aaef6fc8cb2e4f970","sha512":"def7ab51cc8fa04431fba8355df7bce67ead90826830153cdeffa03c12d436da24a5c1e6c0fb19180098ac6c6b508bdceec15b8386a7f13c54d047cbff420b4e","ssdeep":"1536:U2+28Aq7gYFyn+TS6bQFz1Ro8DCAcPz0gRKK2IqxfKqR4KbmUZPEVWoLAC8wjb/U:6GWgYoGzaq8uT0mVqpMwFPLoLtb//s","tlshash":"c0b312095b91a2776668473b38320f215a48793c3f7d035c86ca29fbab734a95c954fc","first_seen":"2026-07-13T00:24:44.476486Z","last_seen":"2026-07-13T06:52:47.350149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":1033,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:44.381Z","timestamp":1783904444381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 13 Jul 2026 01:00:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 13 Jul 2026 15:00:45 GMT\r\ncache-control: max-age=50400\r\nset-cookie: __uni__uid=rBEQUmpUOL0eM+afAwWHAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-13T05:56:09.666123Z","times_seen":17015,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":11,"connect":220,"send":0,"wait":223,"receive":0,"ssl":425},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/favicon-DVfirV0b.ico","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:42.555Z","timestamp":1783904442555,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/favicon-DVfirV0b.ico HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/x-icon\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"79164bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:41 GMT\r\nContent-Length: 97094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":97094,"size_decoded":97355,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 8 icons, -128x-128, 24 bits/pixel, -128x-128, 8 bits/pixel","md5":"36c26fd119274c75aef35e32774ff450","sha1":"6b7c24b5118935cc5964f1b88a7275b476206b61","sha256":"5daf117f0404ff81c2b31aaab1a00f6cdba7e911b18d6c48d3204efab012fdea","sha512":"54dc8e674ef00b53fe98e271e087eeb81de5f5310b508a684570304a9194644c2c2d4d452ead051dddc69148953007ef3bb148315786bb709630a686c7c50838","ssdeep":"48:R/8nrLSO6a08sE/gbN1pv6uj4LRg0pZm:RknHSO6JM4DRQ","tlshash":"bd93ba130aa78844ff8784be8d760af40710ef0ac0f3b6d649c0fcf9ed2699b9954945","first_seen":"2024-01-22T21:41:02Z","last_seen":"2026-07-13T06:52:47.337549Z","times_seen":36,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.563Z","timestamp":1783904443563,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"49d656bdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 91\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":91,"size_decoded":359,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-07-13T06:52:47.342228Z","times_seen":1708,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/logo_default-Dc-ZjQ0M.svg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.908Z","timestamp":1783904443908,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/logo_default-Dc-ZjQ0M.svg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 5863\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":5863,"size_decoded":6124,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27b3079c3d0f35df568c7531a9712dc0","sha1":"dc48e92d383d4fb247ab98cb641ff316b921089e","sha256":"1103c479bd2791d5d73dc648afb043911087743a0951605c03edf0804be57ac6","sha512":"74424893de8b177b02d8c1cb959b09aa1f0ba474fef91683c8612b4237dac86e9a16860f1fde70eada90e2599a9a6eed2c6a922385078f8956ce41cc92f9c2e1","ssdeep":"96:+P6rYvc0LlL+AR6XEpYPN8kYpUbyBqq8Biul+CBmKtLs8qQPt:cE0Ld+HU1kYpNT8oulPRLs8qYt","tlshash":"2ac1c6b25370d7e8a5c00f4a6f91694a23ba50ce757142d8c78b7549acc7db3723ce60","first_seen":"2025-05-04T15:54:17.840245Z","last_seen":"2026-07-13T06:52:47.343367Z","times_seen":26,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/lao1-DkBlz2IF.jpeg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.915Z","timestamp":1783904443915,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/lao1-DkBlz2IF.jpeg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:42 GMT\r\nContent-Length: 130624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":130624,"size_decoded":130884,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"8207b6b8958c22999ce2a717327d719b","sha1":"b537760d3191eee5e376c49f60bcb4132faf6b45","sha256":"562becd2a1647b5754f1db3e1f3dd54b463f398fc6ca2adcf88c9b9c4472f576","sha512":"fe99d8320579f7a17c6aafe9819f4ce4a98dfb68f0899f620427535cb3cf49a71c332977980b9f8ad134203d038047c277a2f441298d57de3c95fc75af45e449","ssdeep":"3072:kigSwMA3OV208X6oJXYVlBm9qcFeBhKOTyuthGnIF0:SeA3OVx8X6QY/BmOBKuSnIF0","tlshash":"4ed3125e7560d6c1882f73de800b8d77c5e96c1acf67342684b00aabdec26d9c27de18","first_seen":"2026-07-13T00:24:44.502491Z","last_seen":"2026-07-13T06:52:47.346341Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1662,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":365,"receive":956,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nomura.vip/assets/nv1-DV7flPXm.jpeg","fqdn":"nomura.vip","domain":"nomura.vip","tld":"vip"},"ip":{"addr":"209.209.50.211","port":80,"asn":0,"as":"","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nomura.vip/","date":"2026-07-13T01:00:43.917Z","timestamp":1783904443917,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/nv1-DV7flPXm.jpeg HTTP/1.1\r\nHost: nomura.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://nomura.vip/\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=604800\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 12 Jul 2026 03:58:46 GMT\r\nAccept-Ranges: bytes\r\nETag: \"938b4bbdb211dd1:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sun, 12 Jul 2026 13:00:43 GMT\r\nContent-Length: 111362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":111362,"size_decoded":111622,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1024x1024, components 3","md5":"ed52db4eabae240668a5fc5d4cedca0d","sha1":"8ed9eda0e3fd9d5d66f5424683d798e7e9685ca5","sha256":"518e81746e48aa909b043ab7976b66791344f3f03243d990b70096535c34014f","sha512":"daf84ff0b540771ca4721c0cb90789822dc552a4d5eb20567cd563479e07c8365b4f2e2457f22ffd54b0ac49b31996532d000ed2109c3b7664d6e136f78d96d6","ssdeep":"3072:EMwb7dCeWJC8cML7dZYOJHYvRelHPbQGNXkZNcL:EM2MegX7fJH2RIzZUZNY","tlshash":"cab312a728a367d1b0b1df5a84807dc6c21ed31c3e71781529f1fb2c1a280d78fd59a6","first_seen":"2026-07-13T00:24:44.497431Z","last_seen":"2026-07-13T06:52:47.347879Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":779,"dns":0,"connect":0,"send":0,"wait":347,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-13","alert":"Sinkholed","trigger":"nomura.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}