{"report_id":"548bf39c-453e-4a7e-b0c1-0c58cc71fecd","version":0,"status":"done","tags":[],"date":"2026-09-25T13:07:57Z","url":{"schema":"http","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.121","port":0,"asn":7483,"as":"Skycloud Computing co., Ltd.","country":"Taiwan","country_code":"TW"},"final":{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"title":"首頁","dom":{"size":212671,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3241)","md5":"52f77580f8e440c67422f51f678ff056","sha1":"50b8a5e34b586e077a1eb0df4ca35bbf67934453","sha256":"d568570216391a1c14be9537d90fdd927c5e84a1b7c69b5a68f63e93b85f6b47","sha512":"6617f47abcd240a4d8447fa02ec6afd3eec22c7162cb58ead9db91610ca29d018078b6ab4ad192ea5627d8837527f051708cbb2291ad46b06d665147c3ff432c","ssdeep":"1536:VTXmemrE+4qhQRm42wxJLxsY/7LsmBA3mu35K6QqCXF0boLW:VzmemCxsYkmkmu35KZA","tlshash":"6224742144f262ab0257e0d9bc74ab1f7fe2c203ce465a5576ec1b9c9fcae82d81714c","dom_hash":"domhash712488185710af5e9f868b3d3fa87957","first_seen":"2026-09-25T12:39:07.690017Z","last_seen":"2026-09-25T13:11:02.605508Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.121","port":0,"asn":7483,"as":"Skycloud Computing co., Ltd.","country":"Taiwan","country_code":"TW"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T13:07:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"676970.xyz","ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"domain_registered":"2026-09-19","domain_rank":0,"first_seen":"2026-09-25T12:39:00.699735Z","last_seen":"2026-09-25T12:39:00.699735Z","alert_count":755,"request_count":151,"received_data":3605387,"sent_data":77258,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"676970.xyz/css/hm.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa9553cf6f575a06116aad5de6ecfdaa","sha1":"70660b59b58477499b0f855d0de460bb91450d2f","sha256":"b0e33bfa668dde38593ee43d64184ac5ea78ee2a3cc1ec037381a4a433355f61","sha512":"171c4f43054b0bb35ae9c6fbc04d4ff599e0f0c5d3bf8ec863343909891e134600d391145bf396802a1cfafa56bf7f1777d71650139debdf4af1487381f61c84","ssdeep":"384:8rI5lo11JYTRl6scJxFVCFI/TayvuodiPIGm8kaR1oRwvuI/vePOpy04Euhw6:iI3qYG5gMdvusiPIx8SRwvuIXeWo03ov","tlshash":"89d2c8a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","size":30155,"data":"","first_seen":"2024-08-01T23:38:44Z","last_seen":"2026-09-27T03:24:50.677705Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"da19bf9c683ebadf3dc392be698e8885","sha1":"13c8e4f94c60c9a7689b491011c6a0eb98ef2be0","sha256":"cf406b3c4ddf68776460096ef4da49c4bcae3aa6080e172a99c87d40231c77ff","sha512":"cb444ee2a82d14c95c3bf16470d027744b15b6937ee82f9bee5c9360241cd840420bfcccd9750551abcfe4d18bb8d5419fad8fe4c0bf36bdbd94eaacf7104d74","ssdeep":"","tlshash":"b470000033cf3030c0300003fc0c000000300c00cc333c33c003000c00003cc00000c3","size":20,"data":"","first_seen":"2025-11-04T09:41:56.161536Z","last_seen":"2026-09-27T03:24:50.688779Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"47c629ad06a0a724c228ad4280931c57","sha1":"4a5dc326fd79d78c5526fca7d441c4df8188fe8f","sha256":"7cb76a671f33bd68279afecdc7159e427c04d02dd72e159bd913d5363dfdad47","sha512":"07188f5f9a722580f6d939a31a4ea23a1d2e50a7c9701f02e39110f2cab58533bcb4724fdbc880b0f1be1ba56c35abdd9112637b84b5ed11f09a615066ab3cdc","ssdeep":"","tlshash":"ad70000cbc8c300000023228802b000800b2002022000000800002800c32038200bb08","size":20,"data":"","first_seen":"2024-08-29T17:35:42.534583Z","last_seen":"2026-09-27T03:24:50.689384Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"cbef3c3ceea2fd1bacd798897d30fb43","sha1":"af736e297a7160cdcdb2729af28c2ade2a54773e","sha256":"e4289607d23ceaa928c80d56d045a36b3009c07e5268ca20163bf54c02f6f666","sha512":"67b01b61f1a76f7fc82fd647c0415d551e8c3e00f51ec0c3a6e0200dd8ac341b55ebf91bb3724e02a670eb9fb7e426068a394a7d4180d56da21be0c6ddb88023","ssdeep":"","tlshash":"dca0023e4d7e715b5d3d1c5243591c4737d228316304c902790fb8b54fd6115526c08d","size":68,"data":"","first_seen":"2025-11-04T09:41:56.164286Z","last_seen":"2026-09-27T03:24:50.690006Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb2823ea9eac1142cb6987a0521534f9","sha1":"dd6dba23f5ac717dfafe071f5c45ee3a5cb2265b","sha256":"94e8f604f4132132f8e998187a35d1bd5ce8ec2076d69a9c4913a9d3d3857d2e","sha512":"89662de518a456d39f92fa28448bd95f1987d4ac8380527072d9c7fe6f879e70c781089623131d40f73f7f6467a8750da389de24bd637f9d6aeb937e9f4a396b","ssdeep":"","tlshash":"be81cf11d121163b11a979ee2b25e98ceeb78f8ec200d0a7f09dc9698fd59904127ffd","size":3827,"data":"","first_seen":"2026-07-08T02:40:55.867441Z","last_seen":"2026-09-27T03:24:50.690601Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f408f30b5c1bf87271b1cf6b3b2ad12","sha1":"8d5021f2ce74d4bebbf277c713dd741aa859708e","sha256":"5956d5649f3c18211f571612f724e1ffa638c28fb73a3e24cd26cc7814e206c4","sha512":"cbb903399093d6ac16abc85584d05f4dd91cf34ccf645e73ce341b4856907971ac79ff20f526ed6a3b6fdbb2d473e4371b67ee59600be53fc6ef59988f52530d","ssdeep":"","tlshash":"f241ab88feeb26766073283947bf8544573c910b6206dd21f80d66c45f78239b8afacd","size":2133,"data":"","first_seen":"2026-09-25T12:39:07.731384Z","last_seen":"2026-09-27T03:24:50.691116Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/upow-tools.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec6b846e8c4c6239fd5a2653038afa13","sha1":"6fdf2126a18949e858bee48952aca49e91124f20","sha256":"03ad2c27b27a221f0e7f480ed5c214596ce010605dce849012d7a58e88e9d89c","sha512":"9da61a8cf5fb22e4d372101ce86b1935d540a0a9009fcd99f1013f520ac04d1fcd766d00d89a522b2bece2b1eeb4fd965ec049179e0d9afa9ea269a2146b398b","ssdeep":"","tlshash":"6561881cbc1a71734d3737b66f6e140cf9746c5b1140c996fa2ddaa80fb04196636ee8","size":3413,"data":"","first_seen":"2025-11-04T09:41:56.165187Z","last_seen":"2026-09-27T03:24:50.691713Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/jquery.easing.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"15acb055a0b069def53772cea4c37bed","sha1":"680eab6cf59f830899694bfdfe4d55f12b7d9030","sha256":"32a5de5c85c783849083e3f37ce054508a0f82263634acd49d77ea4a9a21a817","sha512":"c898bb8826ec682ea96d9216eebfb8e8b7faa7a9901691ca47421b24d4266bba574dae1d7fc685788596fe89bb9b2c82f4c11d9995de9f39bca227f79b80f2fd","ssdeep":"","tlshash":"4771474c2cfeb1104313fa74860b9419b26dba574d4cef05fc0c4ea11f15a7a9ab3aac","size":3784,"data":"","first_seen":"2024-06-22T13:00:01Z","last_seen":"2026-09-27T03:24:50.679596Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/jquery.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbb11b58473b2d672f4ed53abbb67336","sha1":"66f47b885d587aa9a6c453ae3f2c9a382e5c7ec7","sha256":"5f1ab65fe2ad6b381a1ae036716475bf78c9b2e309528cf22170c1ddeefddcbf","sha512":"2bb663ecf1ac1e4d9fa58dc9c2f6eea3d9ca739e353287c5aeb2da5143bdcea8219c9c5b677667df95bf65e5ef6d3d91b52ba3c466f0f0f824aa9a195d76c687","ssdeep":"1536:eYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJWFk/zkZ4HWLZoHsrOa99fwk6b7/Hpu:V4KZ+S3WLZICOaLfwk67qD1PaUa98Hrn","tlshash":"ee93e8d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97362,"data":"","first_seen":"2023-03-07T01:07:02Z","last_seen":"2026-09-27T03:24:50.647505Z","times_seen":9761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/bootstrap.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39680,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-27T04:32:49.715584Z","times_seen":32887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/ScrollMagic.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"54601de6c37b3d8aecd60fc48a133f36","sha1":"1d8f857f1d9a6d22be879ea70a0083eed804341f","sha256":"4f8a0dd8dbd6fd9020bc11a42c00a1da1de219f6bbb470289a5669eb8a519b28","sha512":"a0ae3b1f0bef28370b48a00100aa1b5d821f547ba46e0bd2da8ea8e191db5fd5377fb256e06f15f28bff0d1f4651a29e8ef9bef325e44f665445774129fcd39f","ssdeep":"384:LmtGOClFTy05zXKb0jODzOFlZVFCrREKBt/pWdDidU3Zl4/VpFEW/oaDJDyjnjh:6t9Clpy05zXK4VlZVFCrREKBt/pW0yZL","tlshash":"b7b2628d67f22035969bf2798a1fe9097230544f568ede447d0ca3a19f1883c5bbaf4c","size":23555,"data":"","first_seen":"2024-06-22T13:00:01Z","last_seen":"2026-09-27T03:24:50.671499Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/vue.min.js","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a9a4681294d8c5f476687eea6e74842","sha1":"10c79dd8fcda1d0e498fb93d0d0a30ae91630ea8","sha256":"e6e28a8fb9b74533ece152229dafcc3ebc0f4b3dcd62879df115706bce55927d","sha512":"b218285324028cc9737add035787fb10d40b60d5e97884c832847f39041ff2ee73da86ca9165dbc75a0b830e496375d096f04e84b1a7878d86883c64487e1272","ssdeep":"1536:iUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:iYegDM62uqiq2wkxL+2w","tlshash":"009309dd3289b07157eb31f1107f140bf2366919ac0ec194b122e4d67db984d92abe7e","size":94156,"data":"","first_seen":"2023-03-07T01:40:19Z","last_seen":"2026-09-27T03:24:50.620387Z","times_seen":4134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/jquery.tmpl.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"27bc9d7d86250652e125896d94b18764","sha1":"c4671823949d127df1151ec12ece59833db7659d","sha256":"af6592d435a34ae2cbc384c908b2000e3a33f3c3d7bace1a84ba7880a8a80d9e","sha512":"a6e234df27001a97eba75a717484b9a49a2f91b9c3316cf76882bda3bc947e535a927cbf52929d8ee2b3dd2d5031f7498f55d4ab7aab80278d28809ca57e181c","ssdeep":"96:IDpf9JMNxOPifS0/ekHE01RftBV5fC59OoYCKRj8zdMMgWQsDe7dMJSd7vl:47OSkekP1RftB/Cq5Ck8zdNZQsaMJQ","tlshash":"64c1c8aeb29576234bb33478c1fb015bf23ab65b458c4c76d044e58439344a892faf7c","size":6121,"data":"","first_seen":"2023-03-07T12:23:44Z","last_seen":"2026-09-27T03:24:50.617598Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/vant.min.js","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"f42bb36cff076ce8f32a50a12fc6209b","sha1":"7b8eb67dfaddf72b5504ae7ff9aca887d387116f","sha256":"64907943ad200eba70a44fb13c6201041d3dcaf18a8ee764763a8c93a2b480e1","sha512":"a12637040ea8a3327d28e9a1d52846e3e5f98bdbd79946524d6784c84c7d7134a19babd1191bd311946269a57f1218b70da964c1ddb7f13208fb1d9491c709d6","ssdeep":"3072:qurcybZcKdJhXFtmhZQ9E7npW6XJIi0oVRJtWGV1L3lmyfj7rQjyvw9:r4ybesyD7/9/7UyY9","tlshash":"5244d78ab1c1b425079760b5403f110ab237298cb81a84dcf679e5e6ad7ca5ca13ff7d","size":276176,"data":"","first_seen":"2023-03-11T20:26:37Z","last_seen":"2026-09-27T03:24:50.647049Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-09-27T11:13:12.801648Z","times_seen":121887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/slider.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c8863905e85bf67c1da96dec8639d0b","sha1":"a2a7f1d1ddb6f5a90fc080e841b9f1eed24bdada","sha256":"784f88bea21b563904aa8032f119a3cc9872ff2097ae5cc31c20957e763daf91","sha512":"4c7f351ca667653579884738fac774637948b232a788c704dd8c63c75a05ce3861eb951afb378d1c05016bf43ebb820d14e6fc6c380145e897d59129d785e2a0","ssdeep":"768:wxs5QqkBTrGbcbl5Vpy8R3Sh8FpnhU4J+UfBmBUwDjX7+O94:2s+qkBTOcbRB3SiFpnimfBmBUwDjN4","tlshash":"3163510561b123751967217dab9fed80d2fac21b8919e0a4f9fe470ccf8172406eb7e6","size":68171,"data":"","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.659043Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/index.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fb55be68d5f8ff05b007c5c1ff3f231","sha1":"4cf2197e6e84f864e0d70a859f0fae232edd56ee","sha256":"69c89523b0028aa41405f2e4288adf27738482913f4ab58af369b43207b6a092","sha512":"8f970b24c8fa288e83bfb5117c8f09d501b1678c23fd052f0219c4f3eee32bd855acc9c6abe19aeddab7c77b6bc5b8756a3ffce91efd8ed2b606687f553fbea3","ssdeep":"96:dGKDwvOACGf34/pfubneHwaDGwfqOBNmkgW2IG6j9O:dGKuOe34/UbyfqOBNmkbG6j9O","tlshash":"4791fd84380152fb04bb211a2b2b7800de7a5917c221c611fa2ecbe44fb6c95925fedf","size":4495,"data":"","first_seen":"2025-11-04T09:41:56.166727Z","last_seen":"2026-09-27T03:24:50.692381Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"组件right_fixed_list_8加载失败，原因[object Object]","filename":"https://676970.xyz/css/upow-tools.js.%e4%b8%8b%e8%bd%bd","line_number":95,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"676970.xyz/%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1681435556774.html","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.754Z","timestamp":1790341642754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1681435556774.html HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 21:44:12 GMT\r\nETag: \"689faa2c-92\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":374,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-27T11:45:43.762077Z","times_seen":563468,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697680744.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.994Z","timestamp":1790341638994,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697680744.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1607418502496.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.006Z","timestamp":1790341639006,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1607418502496.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698197331.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.019Z","timestamp":1790341639019,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698197331.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-f05\"\r\nExpires: Sun, 25 Oct 2026 13:07:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3845,"size_decoded":4173,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"9ba24eaa9dabed8145d53d2700716e08","sha1":"cb264ebad7c1665908b56788ce819bd61321b7b8","sha256":"8c490c5a688b3f1e8a0cf1fa73a1328efbb9fc73bf6f9c9551223be12f1762c6","sha512":"aa77ac8c2ed8fa7028c3628ae320160e47497084b5eb394bc6f5a4e098ff89d960ed2757ce279ff80b0bb6da1cfd0b915084253667bed23d6b633a549df0b82f","ssdeep":"","tlshash":"b2817eca0c41861967a3476448a7fba5efd644e3df7e353866744a200f34c5ae0f151b","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.648408Z","times_seen":58,"resource_available":false,"data":null}},"time_used":26106,"timings":{"blocked":25230,"dns":0,"connect":0,"send":0,"wait":873,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466167807.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.069Z","timestamp":1790341639069,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466167807.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1670466493195.html","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.758Z","timestamp":1790341642758,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1670466493195.html HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 21:44:12 GMT\r\nETag: \"689faa2c-92\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":374,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-27T11:45:43.762077Z","times_seen":563468,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1669788105683.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.023Z","timestamp":1790341639023,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1669788105683.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-649\"\r\nExpires: Sun, 25 Oct 2026 13:07:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1609,"size_decoded":1627,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced","md5":"82a60d4491b68edbf25f6698431d0db6","sha1":"e98fcb156b6a9f0414bf280658aaf8ad60da2cd2","sha256":"4b74f15a395ac6f5486dbba60ee1c356b1b93fc788b346326c2ed000ff5b5c83","sha512":"69fc469e2506c7a96f24ed381c4728f4fbe70f28b4dcfc9f9b2b703448cac735731861a387094f788d4a91c92338b1c0286a5145e63a3a78a8dafa16052c62bf","ssdeep":"","tlshash":"a6314ec1e3440933b6d4293578071a23a951ac373319ee8482cb76af8b23f795c3ac36","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.666224Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25975,"timings":{"blocked":25605,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1586925101207.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.000Z","timestamp":1790341639000,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1586925101207.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/resources/images/footer/beianbgs.html","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.762Z","timestamp":1790341642762,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /resources/images/footer/beianbgs.html HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/css/style.css\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 21:45:36 GMT\r\nETag: \"689faa80-92\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":374,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-27T11:45:43.762077Z","times_seen":563468,"resource_available":true,"data":null}},"time_used":21087,"timings":{"blocked":20714,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/ScrollMagic.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.980Z","timestamp":1790341638980,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/ScrollMagic.min.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:20 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 23555\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:20 GMT\r\nETag: \"65f880bc-5c03\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23555,"size_decoded":23802,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (623)","md5":"54601de6c37b3d8aecd60fc48a133f36","sha1":"1d8f857f1d9a6d22be879ea70a0083eed804341f","sha256":"4f8a0dd8dbd6fd9020bc11a42c00a1da1de219f6bbb470289a5669eb8a519b28","sha512":"a0ae3b1f0bef28370b48a00100aa1b5d821f547ba46e0bd2da8ea8e191db5fd5377fb256e06f15f28bff0d1f4651a29e8ef9bef325e44f665445774129fcd39f","ssdeep":"384:LmtGOClFTy05zXKb0jODzOFlZVFCrREKBt/pWdDidU3Zl4/VpFEW/oaDJDyjnjh:6t9Clpy05zXK4VlZVFCrREKBt/pW0yZL","tlshash":"b7b2628d67f22035969bf2798a1fe9097230544f568ede447d0ca3a19f1883c5bbaf4c","first_seen":"2024-06-22T13:00:01Z","last_seen":"2026-09-27T03:24:50.671499Z","times_seen":61,"resource_available":true,"data":null}},"time_used":2338,"timings":{"blocked":1605,"dns":0,"connect":0,"send":0,"wait":644,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1586924693386.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.012Z","timestamp":1790341639012,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1586924693386.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-6ea\"\r\nExpires: Sun, 25 Oct 2026 13:07:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1770,"size_decoded":1800,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, interlaced","md5":"f27563436bf9964bb7c6d7a320634671","sha1":"5564c9c8e8c7c265b4d6be97b04a52458c37bf48","sha256":"7c6f5f61395cdf5ed0fb907ca160dae7912dd5849b6cd50fde4a7f82bfe8aea2","sha512":"1088df60a6166e919ae19873a55924d5df2fdc9c6d9ca70fd9fb883fdbc6426637689360c37a9ee5cef9d3014cb8820390853fe3a18025586466f5fc5da55934","ssdeep":"","tlshash":"df31b292cd65595fa70140b8172bbcc0ce7a216321a85f8e1fc294ba3c278e8f53cc23","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.661717Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3945,"timings":{"blocked":3573,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698177308.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.018Z","timestamp":1790341639018,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698177308.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 764\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nETag: \"689efff8-2fc\"\r\nExpires: Sun, 25 Oct 2026 13:07:44 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":764,"size_decoded":1065,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"d6a216cf7d7d8767da3fe4a73fd50023","sha1":"bb5c6791986c38cfce2d8f5493b8f212fa9b7ce7","sha256":"3c4994f628a0496f9037def6e0a0d2548d0ae89eaf3b6747e823485230227b6a","sha512":"2737116ac666e26d7f81bfb436f4b49ddf17350f97994039170df3a727d447f8ecef0eff5827750b6cf868ecc80fa918815d79ee869ba9acf1cd8c89ae6c3306","ssdeep":"","tlshash":"b5019e9bef617b1f41201702672739d8eb31985730490f4f5f9590328da76e8f53ac8a","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.607523Z","times_seen":58,"resource_available":false,"data":null}},"time_used":25482,"timings":{"blocked":25109,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698401409.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.030Z","timestamp":1790341639030,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698401409.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 706\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nETag: \"689efff8-2c2\"\r\nExpires: Sun, 25 Oct 2026 13:07:45 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":706,"size_decoded":1007,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"ed47338dcf3f8f7870015d0eb5948f3d","sha1":"4e3e23d2f4079d884d3ae36c6b488ccc9830159e","sha256":"e5a8a6f862a0a4209f1b59d624bdf19772d9d99c3821f92ebd9c8c6b5dacba08","sha512":"0d8a844c1c57e3ed4a1926d06b356cf4b864bfc07aacff765bf3a8f70f2ea2b3bd6966622a63a3ba39a05c0cddf9d28d7f478602390aa0a9b7cd316fcfbf35c4","ssdeep":"","tlshash":"ef014492f369687732008182350629538c793d3b3200cd1968c3f62fab27fb9bc79d82","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.670859Z","times_seen":51,"resource_available":false,"data":null}},"time_used":27095,"timings":{"blocked":26713,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465171843.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.064Z","timestamp":1790341639064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465171843.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:25 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-1f905\"\r\nExpires: Sun, 25 Oct 2026 13:07:25 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":129285,"size_decoded":129632,"mime_type":"image/png","magic":"PNG image data, 960 x 480, 8-bit colormap, non-interlaced","md5":"2ed8a68d6b25f23f9f80d7c9126036e4","sha1":"ddeda71900c4214982fcf3303dde3d778602c57f","sha256":"fead51e6dcb0f899b53b760448e90883d1b7542a9583561a5e2340e3724306f5","sha512":"370d1c995435e36d966d6ff31717f596d87f73a2d032b19620ae4fad84babeec3e4e371faae84bf78c81df55e621430c9b89bb885c16ac17afad89fea16d362c","ssdeep":"3072:ioTuaYk4dpV/rV/0cMHfW0U36O1II6W8cnzzC4Lx:7uaUdpJrMH3U36wIslfDF","tlshash":"b1c3126c34f99d0fc86bedb1572e722b0a6528a15d16a77810f17b110620974aef6fc3","first_seen":"2024-06-22T13:01:04Z","last_seen":"2026-09-27T03:24:50.635026Z","times_seen":63,"resource_available":false,"data":null}},"time_used":12606,"timings":{"blocked":6372,"dns":0,"connect":0,"send":0,"wait":403,"receive":5831,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/invalid-name%403x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.113Z","timestamp":1790341639113,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/invalid-name%403x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/header3.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.134Z","timestamp":1790341639134,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /header3.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/bootstrap.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.955Z","timestamp":1790341638955,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/bootstrap.min.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 39680\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:18 GMT\r\nETag: \"65f880ba-9b00\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":39927,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (39553)","md5":"2f34b630ffe30ba2ff2b91e3f3c322a1","sha1":"b16fd8226bd6bfb08e568f1b1d0a21d60247cefb","sha256":"9ee2fcff6709e4d0d24b09ca0fc56aade12b4961ed9c43fd13b03248bfb57afe","sha512":"a014e9acc78d10a0a7a9fbaa29deac6ef17398542d9574b77b40bf446155d210fa43384757e3837da41b025998ebfab4b9b6f094033f9c226392b800df068bce","ssdeep":"768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW","tlshash":"1b03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-27T04:32:49.715584Z","times_seen":32887,"resource_available":true,"data":null}},"time_used":2096,"timings":{"blocked":377,"dns":0,"connect":0,"send":0,"wait":1577,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/m-i-pv-6%402x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.041Z","timestamp":1790341639041,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/m-i-pv-6%402x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:48 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:33:22 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f7d72-bbd\"\r\nExpires: Sun, 25 Oct 2026 13:07:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3005,"size_decoded":3180,"mime_type":"image/png","magic":"PNG image data, 62 x 44, 8-bit/color RGBA, non-interlaced","md5":"2045c917adfe54931305689f37d1d7d1","sha1":"4a8851ab9192caa4a80d7831c551962f514c51e7","sha256":"1980f34bc15b5f4a860f66ca1a1628da505f0d935e544547146bb22ad32edac5","sha512":"d32af46de121ff00618794e923aa892933f782fac1a755ee980d1440bb14c7d435000d88d709f41eb4ad43a6469b22688d990c02c837d14c55535c51b2bc7317","ssdeep":"","tlshash":"d7515b953e42283dd1c473ba10f6c6c41c37a080a2923259bef3611c25598b1f8ebaba","first_seen":"2025-11-04T09:41:56.108217Z","last_seen":"2026-09-27T03:24:50.638392Z","times_seen":40,"resource_available":false,"data":null}},"time_used":29103,"timings":{"blocked":28732,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466987110.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.046Z","timestamp":1790341639046,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466987110.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468579198.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.088Z","timestamp":1790341639088,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468579198.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697756076.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.997Z","timestamp":1790341638997,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697756076.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1586925101197.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.999Z","timestamp":1790341638999,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1586925101197.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1669797406030.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.008Z","timestamp":1790341639008,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1669797406030.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670467024213.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.048Z","timestamp":1790341639048,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670467024213.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465158616.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.063Z","timestamp":1790341639063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465158616.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:24 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-22c5e\"\r\nExpires: Sun, 25 Oct 2026 13:07:24 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":142430,"size_decoded":142566,"mime_type":"image/png","magic":"PNG image data, 960 x 480, 8-bit colormap, non-interlaced","md5":"e56532b633a110e0824d9bd911038227","sha1":"861213a4fcc2253b5c806d22256d049195849362","sha256":"763c9d671e783d1a4f2148096369fbaf245c3086983d3dc4f80260ef0c6f2d21","sha512":"2d30208239181fbcf448ce40c57b357cfc1873c1c13e5e210c75c26d8c17fb96b7c6ec3b97d11be5262e889b8d260b9a6dfccc11e931d7adbf83d39dca5e8144","ssdeep":"3072:uPN5f0RYy/sUz5uFc/YmozUJ42yPcrpWbJeLZiVy9b:uPNFqYSsUz5fAnUJ6crIbJeLv9","tlshash":"7ed3125d07f28b6e230f0e6dd66a36cce13119c2dda5c3c089f6cae261574c53a0e7a6","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.639351Z","times_seen":63,"resource_available":false,"data":null}},"time_used":7719,"timings":{"blocked":5609,"dns":0,"connect":0,"send":0,"wait":482,"receive":1628,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1607418667135.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.024Z","timestamp":1790341639024,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1607418667135.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-abe\"\r\nExpires: Sun, 25 Oct 2026 13:07:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2750,"size_decoded":3090,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"739fa55c5dd0b3fd909c92b9a2d83036","sha1":"318f7cf8bcbb1e838b041c64fd284a441d934db0","sha256":"bdf872de48714d7da957b787210d7569169102ee1ad9acba845c51f2dbc5f137","sha512":"002ace8c6f0fdc971656e7b6373bf2be73bdb673b9c97c6f47e2b3414b5d7f78990326faa87f879954a31093cf96403081c35999ce995b723a5749d69bfe29bc","ssdeep":"","tlshash":"49513c8b2a7d2dfef8810f36ca826658cd1b511b0141602b3e1b56b068cf1c4f26530f","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.65035Z","times_seen":57,"resource_available":false,"data":null}},"time_used":26541,"timings":{"blocked":25859,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575699932329.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.028Z","timestamp":1790341639028,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575699932329.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-7bf\"\r\nExpires: Sun, 25 Oct 2026 13:07:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1983,"size_decoded":2286,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"be125a13d34b163c4ea0ead84a1fa29a","sha1":"8e1b5d5e1e2868a4c85c80260529f232e6206e14","sha256":"1d02f584dc6e843002920ed21cccafee260d069e2eb9d3e866e2e4af8813155e","sha512":"7f0e3236091a77581b84daf1b720c383a0ccd1f6b4232d3390d6591c417050687c571d20c4a999ca2895097f2517eb6d3e9467e0e2c06b510f3e0084cba0573e","ssdeep":"","tlshash":"7d41f4830c60b934ac3d89bf812a3fd3d2af39230a710294d632d6c2b05238c0429a72","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.628551Z","times_seen":51,"resource_available":false,"data":null}},"time_used":26866,"timings":{"blocked":26487,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670464909676.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.056Z","timestamp":1790341639056,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670464909676.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-6b29\"\r\nExpires: Sun, 25 Oct 2026 13:07:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27433,"size_decoded":27651,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"7000f136b87c6f3ae65f3af0c0dc934d","sha1":"26c64806abc6500210def0f5180a1e3d41dd4a23","sha256":"4fb078a80e8954370763f987cfb1793b828eb6977d6dc9678af855bfe8c97e38","sha512":"60bd58f146ad0a09a686a1206dbe177ecf04b17948a3fdfd323c26e098bc00f48087220fc10a80f9b3157ac29a3b2ccc06adea0f9836940770ee714011b51e1c","ssdeep":"768:1tS3o9q4VVbRxJ/oJXPE+ljmbhzZCPoQ4gV:1bPVVbi8NhzMoQ4gV","tlshash":"9ac2e0bfc16461c63ae79869512b0c8476ff86057bd081ee0e8aa3b1d12c65aa693cc5","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.61694Z","times_seen":64,"resource_available":false,"data":null}},"time_used":5236,"timings":{"blocked":4451,"dns":0,"connect":0,"send":0,"wait":684,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670467343243.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.087Z","timestamp":1790341639087,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670467343243.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670493046671.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.103Z","timestamp":1790341639103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670493046671.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:35 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-1bf6f\"\r\nExpires: Sun, 25 Oct 2026 13:07:35 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114543,"size_decoded":114933,"mime_type":"image/png","magic":"PNG image data, 795 x 795, 8-bit colormap, non-interlaced","md5":"a3bdf2c361db2fe743d563c25c8af190","sha1":"fe8ce6b7596009b5fdde790f18abd0d2126ca3d2","sha256":"3e76a034365ffe0d70aa55ab579eaf238b9d7666cd47ebe65297c682d5b37c0b","sha512":"a1bee797adfe5726525101c5438ec964f6d5d8f3011c091b15597c9a485eb16552b1dca5269bb5436077b1c8ff5a04fdad0178deeb0c2f6da02075607343bfac","ssdeep":"1536:eb7dMm8OsdSOKQxtFb71Zf7Js0eGtLN/1JLHmm0D3QzcqEyvE92HAGsBsZ5O9BZQ:e/CdS+Pfafme3KvFSGA45eBTewW","tlshash":"aeb3128cfba423dc8fad4c597a35f54dcf19718f22a71a810c4582185a429c7dded32b","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.681492Z","times_seen":61,"resource_available":false,"data":null}},"time_used":20777,"timings":{"blocked":15752,"dns":0,"connect":0,"send":0,"wait":589,"receive":4436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/slider.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.956Z","timestamp":1790341638956,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/slider.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:20 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 68171\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:20 GMT\r\nETag: \"65f880bc-10a4b\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68171,"size_decoded":68419,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text","md5":"4c8863905e85bf67c1da96dec8639d0b","sha1":"a2a7f1d1ddb6f5a90fc080e841b9f1eed24bdada","sha256":"784f88bea21b563904aa8032f119a3cc9872ff2097ae5cc31c20957e763daf91","sha512":"4c7f351ca667653579884738fac774637948b232a788c704dd8c63c75a05ce3861eb951afb378d1c05016bf43ebb820d14e6fc6c380145e897d59129d785e2a0","ssdeep":"768:wxs5QqkBTrGbcbl5Vpy8R3Sh8FpnhU4J+UfBmBUwDjX7+O94:2s+qkBTOcbRB3SiFpnimfBmBUwDjN4","tlshash":"3163510561b123751967217dab9fed80d2fac21b8919e0a4f9fe470ccf8172406eb7e6","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.659043Z","times_seen":68,"resource_available":true,"data":null}},"time_used":2556,"timings":{"blocked":775,"dns":0,"connect":0,"send":0,"wait":1252,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1681435601595.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.043Z","timestamp":1790341639043,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1681435601595.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:48 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:18:34 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f79fa-45ee2\"\r\nExpires: Sun, 25 Oct 2026 13:07:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465786133.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.104Z","timestamp":1790341639104,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465786133.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:36 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-33aa2\"\r\nExpires: Sun, 25 Oct 2026 13:07:36 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":211618,"size_decoded":211899,"mime_type":"image/png","magic":"PNG image data, 795 x 795, 8-bit colormap, non-interlaced","md5":"71dffdbdb2d71219d31148d58b1cce16","sha1":"948c42ff605007b314391405f1d5e59aae864eb7","sha256":"ccd90967a5ba6839beac5355a9f828ae28d04277ebec5b7350a1f66e6ea81f7c","sha512":"76cf817b30e874c480bad16e87c0e677966db75fc2ea6dd35da04b1049f8c6b39b2132b14878d2399bd7c9cccb57f8d502be82084069f2ca179ff90a65077d5b","ssdeep":"6144:LQRntXibEGeQHubYNxhz7UfHBLqpcO3azKk/:LQRntyCQHjHzAfhcL5k/","tlshash":"592422b03cfe08868916f0c5da79239aa52c84f7da185aad17dcc775f72804c4933b5e","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.635983Z","times_seen":61,"resource_available":false,"data":null}},"time_used":25223,"timings":{"blocked":16841,"dns":0,"connect":0,"send":0,"wait":1286,"receive":7096,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/wechat-icon%403x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.110Z","timestamp":1790341639110,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/wechat-icon%403x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465556557.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.100Z","timestamp":1790341639100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465556557.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:34 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-b5d\"\r\nExpires: Sun, 25 Oct 2026 13:07:34 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2909,"size_decoded":3223,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"5b682c55f6fec123cfdfa98164995b4a","sha1":"c110193438bb924fc53b9c03a0e30486884562af","sha256":"3cdb41e1953f144141660d05cbc5e138d481d6b0ba0c5b49518df7a0e1259104","sha512":"173e75316d4220620d09e5d478b9519398158862abcb14cf116bebf486d6c5dfa00a356cf4ef4b2180974d1d64262777c3cdb9fa8137e26ac61e4f345af39d77","ssdeep":"","tlshash":"9e511a67e264bd14dca81db40c1692d69412f99462927178c9d34135ce1e9fc74a38be","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.664847Z","times_seen":65,"resource_available":false,"data":null}},"time_used":15614,"timings":{"blocked":15239,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T13:07:17.078Z","timestamp":1790341637078,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:18 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Wed, 23 Sep 2026 06:51:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6ab376db-32edd\"\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":208605,"size_decoded":25462,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3241)","md5":"92452fe93d5369cfaec896a2628a1fbc","sha1":"2a28e0bcaa1e0dcc0ecdbc6779dde366262312cc","sha256":"a2c8346fdbd19d6aeee55210330c5b2a39f0afbb3ea24d92b3b344da96192a89","sha512":"b1f3bd33bea71e28f63ea05d27b75363c8a0ff777cc7e4a1f99a0ba5c7a97de8808ca6f64118b7bf083c955bfa9b2d03d78ef8fa63fb58fdd1fdc4e82368d1b2","ssdeep":"1536:LkXmJm1Km4Ih6bmIKw/JTxsQf7LsmBX3mK35K6QqCXF0yoLf:L+m9mcxsQEmdmK35KZ8","tlshash":"f114642144f262ab0257d0c9bc74ab1f7fe1c207de875a5676ed1b989fcae82c80315d","first_seen":"2026-09-25T12:39:07.705135Z","last_seen":"2026-09-27T03:24:50.654122Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1877,"timings":{"blocked":-1,"dns":481,"connect":264,"send":0,"wait":603,"receive":259,"ssl":270},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/index.css","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.961Z","timestamp":1790341638961,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/index.css HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:20 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:18 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65f880ba-6fbc\"\r\nExpires: Wed, 23 Sep 2026 23:25:17 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: CDN\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28604,"size_decoded":4222,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"04f4d1ead2ab82accbf4d41ebf28281c","sha1":"6b7294893f40b364abaeaed4eeddafa8b0c7771c","sha256":"f1fbd93f81956dc936db9da73795b186890e25ba33021893a5b0ac0fe775eb74","sha512":"b03949afdbc8515e67a49746c5730910db7519bf9912375bf2f6c217dc9b1ddf554f1c797939009a8f9bb18d070735551e05b02cdaef7640d22404995f8408a5","ssdeep":"192:csOH5gsGZcQEkSHWqWQ9fHixIdqWPcCyIq9byGjN3jTRWGDW:SuQdkI0CoJxm","tlshash":"89d2e1a12e00113baafe706678102f466d134c37a30775f4faa19868cbfb5a3619f74d","first_seen":"2024-08-19T15:13:09.301018Z","last_seen":"2026-09-27T03:24:50.627618Z","times_seen":47,"resource_available":true,"data":null}},"time_used":2004,"timings":{"blocked":1716,"dns":0,"connect":0,"send":0,"wait":282,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697680726.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.994Z","timestamp":1790341638994,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697680726.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1677116003675.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.045Z","timestamp":1790341639045,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1677116003675.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:48 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:16 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65f880b8-b2547\"\r\nExpires: Sun, 25 Oct 2026 13:07:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468462506.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.083Z","timestamp":1790341639083,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468462506.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1576072695050.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.097Z","timestamp":1790341639097,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1576072695050.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:31 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:57:58 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65f880a6-26aaa\"\r\nExpires: Sun, 25 Oct 2026 13:07:31 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158378,"size_decoded":158392,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x675, components 3","md5":"136e7d120d619e27e3b8ae9fffaee074","sha1":"4db6b2582ce62b589d8d3c0ef50094e79ed60749","sha256":"fd59b767de8bf929ab99876f55c83b21e9cf11d7f01d9979fba7131abcab84e1","sha512":"663a18955679b836be23b8bd184446d4c3abc2dbb2e135c84c2a8fa7fbc2e8d10d44b3b08452ff683e79aee39da1df7e6b13e4e501af069edefe3ae878f3652f","ssdeep":"3072:hHtTkZQkqXPUmT7ggIQIl+LC7HcYsnY2/KBd95eZlEkSxc:HvX8MfIXjGPKBvcIkSS","tlshash":"fbf3229586b592132c49f6fd785b745f28b9de0a0fdff8c82aa789747e1b70863201c1","first_seen":"2024-08-01T23:38:45Z","last_seen":"2026-09-27T03:24:50.629502Z","times_seen":46,"resource_available":false,"data":null}},"time_used":18145,"timings":{"blocked":12603,"dns":0,"connect":0,"send":0,"wait":403,"receive":5139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/homepage-logo.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.990Z","timestamp":1790341638990,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/homepage-logo.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:27 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-12022\"\r\nExpires: Sun, 25 Oct 2026 13:07:27 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73762,"size_decoded":73952,"mime_type":"image/png","magic":"PNG image data, 636 x 160, 8-bit/color RGBA, non-interlaced","md5":"8d6b92d5569e29c7c454d652682d1465","sha1":"b8da41d91029361ec66e87583a411fc4cc3204be","sha256":"9e14af30516ed64e1cb2b62995f9ff986a03a5c6168e08c87e468113452df6a0","sha512":"e766856ea21797cc7ab1a58b9889962eeb609912a5f29783ca43ca72e21c239d26c0f5c0330764a5844de6c39d44a87d1af1dc6ca0f8dd6cc6a7d32da2b33f1a","ssdeep":"1536:ZAGJxqnlw8iG8y5xfYTDPDqY4E6VGfBO89yfK2BOsewdI:ZAMGBbfYTDPd6VEOKse9","tlshash":"dc73124f029b153a999ecdc458d77fee27d47c08b0b590e6ea054d2a63f8189e879f30","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.632214Z","times_seen":70,"resource_available":false,"data":null}},"time_used":13982,"timings":{"blocked":8300,"dns":0,"connect":0,"send":0,"wait":737,"receive":4945,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1667808530157.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.010Z","timestamp":1790341639010,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1667808530157.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-645\"\r\nExpires: Sun, 25 Oct 2026 13:07:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1605,"size_decoded":1600,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced","md5":"dac1f7bbbed947ec0e2c9c89f0f40f42","sha1":"9305c1ade0ee371076ed69d48b61f2bf8e40374e","sha256":"e1fda3cc53d02b63f75e8874c73929ad761ccd13c328d3749025f95de3d59fb4","sha512":"0d42975d4994de68a67d3642ac9d17a8de7dd9b44d82f71de7345e34ea365fe935b198b96fd82714e36e2fcea776b35b117273c9141852e274dff5272d34c3ae","ssdeep":"","tlshash":"88311e80cbe92d3bf6940939b25442835e695e377511dd6820cb35af4f4bf701cb1d5a","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.647961Z","times_seen":59,"resource_available":false,"data":null}},"time_used":3943,"timings":{"blocked":3573,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698262463.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.026Z","timestamp":1790341639026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698262463.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-a8d\"\r\nExpires: Sun, 25 Oct 2026 13:07:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2701,"size_decoded":3055,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"26334bb83df1d4d84719728907f61e19","sha1":"0ddbb3298afde063a585dac2a3ccbe60f4e0fe27","sha256":"8e26bfca593a6c78ef223001a20fca1507d60554e5cf096f83e7b5da1faea85c","sha512":"66c7894686d5a9bf85a2d874700df7b3bdaf887a88551f8121b8cd5a7cb2f7c5f36389ccc2551083157525fc09d69324f150094b864f8906d48c6f72f68a04b3","ssdeep":"","tlshash":"5051eb457d9de48d4e4e43cfaed0c06ef07b29e8d12a68ad457c50cc56b158b81c761f","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.640338Z","times_seen":51,"resource_available":false,"data":null}},"time_used":26487,"timings":{"blocked":26106,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698483100.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.031Z","timestamp":1790341639031,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698483100.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:46 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-953\"\r\nExpires: Sun, 25 Oct 2026 13:07:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2387,"size_decoded":2724,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"c72be89fdf78e4d49c1e11bb6ea2de35","sha1":"3e321a3634dcc5a0471f882d3fd0a36aec83f48a","sha256":"72d10b2bc7b24fcb59e2cb1976c5c6d178f6258018d9518dd7770411a1d8522d","sha512":"d1dded785accd1596c6e71c641e28877b8408f7e4903b2c4ea503023e71ddf9460c69ed0bc2a00638a74982d77473a7babdd6c548d3623ca7ea23b62f0e6d04c","ssdeep":"","tlshash":"ea411b9baa902cd7e6712937143f7d08ad55a486535382d8a2a1a4a02817f0df741679","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.666863Z","times_seen":51,"resource_available":false,"data":null}},"time_used":27249,"timings":{"blocked":26866,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698576866.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.039Z","timestamp":1790341639039,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698576866.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 735\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nETag: \"689efffa-2df\"\r\nExpires: Sun, 25 Oct 2026 13:07:47 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":735,"size_decoded":1036,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"1133e40d7cb8a2313728f677c7ea075a","sha1":"e70f99289d045cc3e71b340f688acbd69b535505","sha256":"30a033ee0d9d0fa92e2920921ec71998e03046f737ff1806347cd5fbbd670c3d","sha512":"efce20e68ce7a4b434c7f17d86432a2717ae84f928fcabe5f9e963e3571c1b3afe2d5ebae6d2470939f3d4a66d5baaacfe022087dd70752cad86d8675924cae0","ssdeep":"","tlshash":"9701dda5c71959b7b1995a913081182354144c337100de8998c77c1fd783f3a6c79e8a","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.624505Z","times_seen":57,"resource_available":false,"data":null}},"time_used":29376,"timings":{"blocked":28390,"dns":0,"connect":0,"send":0,"wait":986,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1677116003675.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.044Z","timestamp":1790341639044,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1677116003675.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:48 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:14:44 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f7914-62091\"\r\nExpires: Sun, 25 Oct 2026 13:07:48 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/wechat_QR_code-%402x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.108Z","timestamp":1790341639108,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/wechat_QR_code-%402x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-2299\"\r\nExpires: Sun, 25 Oct 2026 13:07:42 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8857,"size_decoded":8961,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit colormap, non-interlaced","md5":"e1480613ab38c6c99c9dc79b5061de31","sha1":"2d0ae2faec804625c423879ff6fd4614ecc1f6c1","sha256":"47790e2759e938381542b1dcd943871f8f2bb8ba09c73eef12b68410b24bf7b3","sha512":"4937248161027c0ddfc3f7cfcef1b8a78ec115579a83a472b798f707d74647951a60fe1d7fba96ba7551af81540cd8a9f75cdf2caaca2d490414490eddd8ecac","ssdeep":"192:cfGzs5rGD6KhsugZL0Eii4GotQXTQkvWHRCDW03o2agNb:345qD6msbZbiODcxHMdBF","tlshash":"d602aebaf541b512d5d0677c00e7a6478a6d4ca2d1a26a4ae50b524feb372f048378c6","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.615469Z","times_seen":61,"resource_available":false,"data":null}},"time_used":25223,"timings":{"blocked":23475,"dns":0,"connect":0,"send":0,"wait":1738,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1670465492010.html","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.760Z","timestamp":1790341642760,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1670465492010.html HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:27 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 21:45:36 GMT\r\nETag: \"689faa80-92\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":374,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-27T11:45:43.762077Z","times_seen":563468,"resource_available":true,"data":null}},"time_used":4823,"timings":{"blocked":4454,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468362156.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.086Z","timestamp":1790341639086,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468362156.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697908260.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.004Z","timestamp":1790341639004,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697908260.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1675308522544.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.021Z","timestamp":1790341639021,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1675308522544.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-aa4\"\r\nExpires: Sun, 25 Oct 2026 13:07:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2724,"size_decoded":3083,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"7b55f5647268a952e23a05322c674142","sha1":"49d696072ef375cff4b925d896900fb1b42271b6","sha256":"e721355287290164b717a02fb7926b961b4e3d083ad208e98932c480daa1b3da","sha512":"d2f905a548831590e98bf580a4a3956295bb6bb74f9b49e96e0e05aa5427a6b4a58c0414accd33ae4088fbc0b9db628e28308309f39e6193bb68808390d260e1","ssdeep":"","tlshash":"4b514c67e9496c40d9eaa3848c2985e1b3996e4ef551710cfe9850b13c233030eb88ad","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.657513Z","times_seen":57,"resource_available":false,"data":null}},"time_used":25859,"timings":{"blocked":25483,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575699953043.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.035Z","timestamp":1790341639035,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575699953043.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 730\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nETag: \"689efff8-2da\"\r\nExpires: Sun, 25 Oct 2026 13:07:46 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":730,"size_decoded":1031,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"0fc562bfe1e767282c6d1dd123306af5","sha1":"382099709956c451ead7240c309b7fa3be8017e4","sha256":"6b7c083d22636dbee35ad954720d7347c9ea42ae40bfa10f608fe1d691c430e6","sha512":"53c054b6ad9c1f50d5e1e2272932574ad6690cbe2d961c1f251506fb48834da7d9db7e789c1d954d8edad5038d5fd7bdf3763eafc0379704b0a7651734ee553c","ssdeep":"","tlshash":"ae019942db2054b3b91466927059688b88b92f373001cd450ecb749f6b93fb40c36d32","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.637942Z","times_seen":51,"resource_available":false,"data":null}},"time_used":27698,"timings":{"blocked":27327,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670464925004.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.057Z","timestamp":1790341639057,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670464925004.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-51d5\"\r\nExpires: Sun, 25 Oct 2026 13:07:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20949,"size_decoded":20965,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"a426beaeb4707c08b625f974bc6d63c7","sha1":"792faa8599c6e0c2606f003f556c65f8c4691ec0","sha256":"3206360d7fca0d15dddb26f34a778caa03b3d898ff6eed589ffeda676f246f7f","sha512":"094207c8723353ec05f1932f3d791c1886734713886eafcb4e0a4da95785e125629a2a71c5cd29bedbec170fd3e3b28ee9120e0294cb69a1dbe1c56d87087d25","ssdeep":"384:UVnM5EASmLyxM/mYoMUn2tK3XNv0WielZpNZB+O+U03ownAB4Hrkte5EZWL0t9Cx:kGuM/Zg6KNsWiMfHBZmAqHrOyEZzt9Cx","tlshash":"d392d0f263f19a4acf85f73ba3b0bcad86615ec97d20122486b3441968f1b9092d1133","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.678955Z","times_seen":66,"resource_available":false,"data":null}},"time_used":5371,"timings":{"blocked":4492,"dns":0,"connect":0,"send":0,"wait":819,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466150287.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.067Z","timestamp":1790341639067,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466150287.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670467394690.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.101Z","timestamp":1790341639101,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670467394690.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465799044.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.105Z","timestamp":1790341639105,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465799044.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:37 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-3ca9c\"\r\nExpires: Sun, 25 Oct 2026 13:07:37 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670464725215.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.053Z","timestamp":1790341639053,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670464725215.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-6107\"\r\nExpires: Sun, 25 Oct 2026 13:07:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24839,"size_decoded":25125,"mime_type":"image/png","magic":"PNG image data, 540 x 600, 8-bit colormap, non-interlaced","md5":"4e4d63f55030ddfccd63e0c21f27ee19","sha1":"0eeac6acd1d0babf0533920012bfbeaa045b1390","sha256":"563bbc43beb9b3a8e9eae7d3d9c92d854243c4b78a7e689d9f73bea574a156ed","sha512":"eb434093ca53f3eeae1e18cc9196aa77c525821b9aaa287c5686d6451f69b84d4a468a1ea270b19f121d7ae7881789c3f289d4dc386afc2f90f4e469c4e1738b","ssdeep":"768:/Ifd2XQtXS2kSjBjHJq8jq8ZdBR4I6FUKAmrDe:gkXQtX3jxVZdUbnffe","tlshash":"f7b2d01e3691f5b7c7d34eb45fa32c9a1c2453b00e16e97826b6cef3c098e4a046b364","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.630461Z","times_seen":65,"resource_available":false,"data":null}},"time_used":5374,"timings":{"blocked":4388,"dns":0,"connect":0,"send":0,"wait":947,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465141372.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.062Z","timestamp":1790341639062,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465141372.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:24 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-2c2e8\"\r\nExpires: Sun, 25 Oct 2026 13:07:24 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":180968,"size_decoded":180557,"mime_type":"image/png","magic":"PNG image data, 960 x 480, 8-bit colormap, non-interlaced","md5":"0c826da5205c19b05f9f918c1f3d3434","sha1":"c5fbb0c1733a6ddf8d730cde443466aa558977b3","sha256":"6e77459c1bacd209ed0eb85db1cb9158d75f7d859ec1b248b4f8b71e6d1cffc1","sha512":"e9af795cf79b7d5535048edeebbf383917fb589664538240852fc255592248bb730a4be3e80c9a54ef15b91701c3cf2433feefdd9be8b683a656b19ca239a7b5","ssdeep":"3072:NYrBKrd1EWPPexCLOzhDGkFEEYUcCH1C4GkgB+wJ1bgDWgAnt7:NY1Krd2WuCL+ruXUR1C4OZJqDWgyx","tlshash":"ab041319f88e7d326ba16915b3486f443c3676f0395f2783062a7c6bf40cb87292952f","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.638871Z","times_seen":62,"resource_available":false,"data":null}},"time_used":11283,"timings":{"blocked":5374,"dns":0,"connect":0,"send":0,"wait":382,"receive":5527,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468190131.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.077Z","timestamp":1790341639077,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468190131.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670469058545.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.080Z","timestamp":1790341639080,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670469058545.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468556577.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.089Z","timestamp":1790341639089,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468556577.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/weibo%402x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.109Z","timestamp":1790341639109,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/weibo%402x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:43 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-1ed1\"\r\nExpires: Sun, 25 Oct 2026 13:07:43 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7889,"size_decoded":7997,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit colormap, non-interlaced","md5":"74c40fcefd0e91e84d487b72fed39658","sha1":"4103257e2a225878cb86b5af5f4cf772291a55d1","sha256":"196bb3e91ed825975aec424b1682c0e9e88120de1060f287a48cfae5a408b5c8","sha512":"8245d5993617b3271c60f0976f65b370475d6bb2ab899b2ea8fa67745e24a7877b04a1fd1185076fc381e927c9fdb0aa5f83865a69d26200ed1fde01411f7f91","ssdeep":"192:cfwnc1OzkT0u3mppiDjzWsGZRVe8wTH++:nNzsyiDy9etb++","tlshash":"4ff1ae5ef513c848950a3f0954de9d7f22078ce0f262962673cfc9bf0b2836105320ea","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.62665Z","times_seen":61,"resource_available":false,"data":null}},"time_used":24347,"timings":{"blocked":23859,"dns":0,"connect":0,"send":0,"wait":479,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/chayan-footer-logo1.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.141Z","timestamp":1790341639141,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /chayan-footer-logo1.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466601760.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.060Z","timestamp":1790341639060,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466601760.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670467297613.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.081Z","timestamp":1790341639081,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670467297613.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/resources/images/footer/service%402x.html","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.761Z","timestamp":1790341642761,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /resources/images/footer/service%402x.html HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/css/style.css\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:24 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 21:45:36 GMT\r\nETag: \"689faa80-92\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":374,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-27T11:45:43.762077Z","times_seen":563468,"resource_available":true,"data":null}},"time_used":1968,"timings":{"blocked":1594,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698262505.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.027Z","timestamp":1790341639027,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698262505.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 781\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nETag: \"689efffa-30d\"\r\nExpires: Sun, 25 Oct 2026 13:07:45 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":781,"size_decoded":1082,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"2b895d77ca3c4a642afeb3aaf988ee1d","sha1":"e3f16865c72605b8fcfbd0780b32088566aa783a","sha256":"48735da92ac0c8501b3d1ce29e41d5787ef4db492c79aee71f1e7be6afd1c8c1","sha512":"48bb636d1e76c2f1e425b46d2a1d13bf4283b124134df40d5c9a7b13594e4a26e0910f088a61a93966f571db47bc7edac32cef30bb14e199225f014b81665fc5","ssdeep":"","tlshash":"6c01cb97ed90bc2f840a828183177af9c07a026bb016afaf0f50a4314e270c2f139c1a","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.66218Z","times_seen":51,"resource_available":false,"data":null}},"time_used":26712,"timings":{"blocked":26344,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698576849.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.038Z","timestamp":1790341639038,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698576849.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:47 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-12a6\"\r\nExpires: Sun, 25 Oct 2026 13:07:47 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4774,"size_decoded":5119,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"63faca0d51f4bae85d3a34020efa6c00","sha1":"391fb8a6a2f0850b0c7d9962d54d4320fa773c1c","sha256":"055ea7f27f9ce30cb4e0dc5284032124a5f41909ffcae1eeaaa7e6eeeb1e1f86","sha512":"8fbf6dbf998df2e111b630bec20160528278b933a1e0cf1fe01ce9850372edc644f7147cae2f6fed65ff3af848f0a0d148e2b4ef9339e5445a5d72cfa76225cd","ssdeep":"96:yawalaNmNokVY+aFLpVfUd0AMvSSZjcvnf5SUxjFzis6hqdehsB6nJBfLs7:y7alTNosYR3fUd0XvSSdyf5SUhAFh2HH","tlshash":"13a16de51328c17dd1596ccf59ed28df091a2b4172ea7bed8c00a0a79ecb1706ac3cc6","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.640808Z","times_seen":57,"resource_available":false,"data":null}},"time_used":28732,"timings":{"blocked":27940,"dns":0,"connect":0,"send":0,"wait":789,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468254092.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.078Z","timestamp":1790341639078,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468254092.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466550049.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.071Z","timestamp":1790341639071,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466550049.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1576074204730.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.096Z","timestamp":1790341639096,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1576074204730.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:30 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:35:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f7e06-1a551\"\r\nExpires: Sun, 25 Oct 2026 13:07:30 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107857,"size_decoded":76123,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x675, components 3","md5":"f1ee683a7a84051f817aab6ac03bfb76","sha1":"b2bec4db8e339b72832c6e4e803bce5708fffb57","sha256":"be0096ebd02e502d885f3d8b9378369aa4cfbe58c23a8ccf81f8af3817c32737","sha512":"f32f59c2a76fcd9c85a8b3c8d9dfd372cbab99e404c96f04afdd6cc795fe203867a4506fa2509ff5e4fe158c178944c9c29c973e0e006120458a784dc0e6b93b","ssdeep":"1536://LaRahSO0nqqQBO5IGWZOiMWUlOfaRYAVHwA6g://LgMbNMM9AL","tlshash":"bbb3bf308f2d47941de67da35305da75c2754e9043ab7af3cfb9ab0da48ea20587812f","first_seen":"2025-11-04T09:41:56.040368Z","last_seen":"2026-09-27T03:24:50.672201Z","times_seen":42,"resource_available":false,"data":null}},"time_used":15022,"timings":{"blocked":11635,"dns":0,"connect":0,"send":0,"wait":372,"receive":3015,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/upow-tools.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.959Z","timestamp":1790341638959,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/upow-tools.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:20 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 3413\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 23:48:26 GMT\r\nETag: \"689fc74a-d55\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3413,"size_decoded":3658,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":1841,"timings":{"blocked":1447,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/top-bg%403x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.992Z","timestamp":1790341638992,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/top-bg%403x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:28 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-926\"\r\nExpires: Sun, 25 Oct 2026 13:07:27 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2342,"size_decoded":2705,"mime_type":"image/png","magic":"PNG image data, 120 x 186, 8-bit/color RGBA, non-interlaced","md5":"385bbe801013ec5486105c2f6fea9069","sha1":"7920af14a22da7c82419ba9629787d5bcd84e70d","sha256":"a3ace67b08e6f290228d4d20e8a609ede26a29d6ed2b4141ba816124f7776157","sha512":"01f28c5039e80df96b24a2cec342da5f90b27a3e5f225613573e7ef3ca6d05ee3fc75dfd11fcb9fae324812e6d2e69936280a276bf07eb8998a1f540ba413e22","ssdeep":"","tlshash":"b7411a21eb9ab594c01a83664f5fc8e43e320747aa5e57d640b212222337821a8e0477","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.621466Z","times_seen":56,"resource_available":false,"data":null}},"time_used":9481,"timings":{"blocked":8674,"dns":0,"connect":0,"send":0,"wait":807,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1667463392629.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.010Z","timestamp":1790341639010,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1667463392629.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-1f28\"\r\nExpires: Sun, 25 Oct 2026 13:07:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7976,"size_decoded":8247,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, interlaced","md5":"39b38ac71fde8dc2ec5c78458e5b0cca","sha1":"1e1a3ba1bb95c24e7f004d4f5ca52c8fd573f7c1","sha256":"10f39c3700acc8ca65aed204ca07e53f8f0eda4ea94d00bdffeb26e7e0e4c360","sha512":"88cbc1d2e5d521b2f030fd4e618c7e35c1765283617a5cb350d3f0f51016536284ac54eafeff0c5a666f048b657e84d0eeed862d67fb5c1b87976ee5f0af84c8","ssdeep":"192:d0cRd55bahEVS8fjohIrqTBkTvqt1WX17VP1:d9RL5S8Z4kTyt1w7p1","tlshash":"81f1bf5b404c4c67ee27f3e0a34d5312872e663b2e08d68b441118b699d1fc13da2edf","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.634129Z","times_seen":59,"resource_available":false,"data":null}},"time_used":4206,"timings":{"blocked":3573,"dns":0,"connect":0,"send":0,"wait":624,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/download.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.052Z","timestamp":1790341639052,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /download.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468449005.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.082Z","timestamp":1790341639082,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468449005.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1629432579874.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.093Z","timestamp":1790341639093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1629432579874.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:28 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:52:48 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f8200-e371e\"\r\nExpires: Sun, 25 Oct 2026 13:07:28 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468342736.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.085Z","timestamp":1790341639085,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468342736.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/vant.min.js","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.951Z","timestamp":1790341638951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /vant.min.js HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Aug 2021 20:14:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6116d28a-436d0\"\r\nExpires: Wed, 23 Sep 2026 23:25:17 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: CDN\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":276176,"size_decoded":80908,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47623), with CRLF line terminators","md5":"f42bb36cff076ce8f32a50a12fc6209b","sha1":"7b8eb67dfaddf72b5504ae7ff9aca887d387116f","sha256":"64907943ad200eba70a44fb13c6201041d3dcaf18a8ee764763a8c93a2b480e1","sha512":"a12637040ea8a3327d28e9a1d52846e3e5f98bdbd79946524d6784c84c7d7134a19babd1191bd311946269a57f1218b70da964c1ddb7f13208fb1d9491c709d6","ssdeep":"3072:qurcybZcKdJhXFtmhZQ9E7npW6XJIi0oVRJtWGV1L3lmyfj7rQjyvw9:r4ybesyD7/9/7UyY9","tlshash":"5244d78ab1c1b425079760b5403f110ab237298cb81a84dcf679e5e6ad7ca5ca13ff7d","first_seen":"2023-03-11T20:26:37Z","last_seen":"2026-09-27T03:24:50.647049Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1484,"timings":{"blocked":-1,"dns":0,"connect":280,"send":0,"wait":286,"receive":643,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697723293.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.995Z","timestamp":1790341638995,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697723293.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1598234494505.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.036Z","timestamp":1790341639036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1598234494505.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:46 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-193f\"\r\nExpires: Sun, 25 Oct 2026 13:07:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6463,"size_decoded":6709,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced","md5":"b81075dd03394e75c488f07e9c1df264","sha1":"ffc8d53806acbd62b65e1cfec1c85589338f8060","sha256":"ec5e6686c371a4ee75319b4abe11ac547edba1bcf3837b5b4d95c5e8dba8f139","sha512":"f3b7281f66cdfb505b158b47a0185512d3d03383cc20521ba1ded712710787ca2e2019fb246ea1368a953c8745f64136efb91a41a81b2057c48f110838cc7679","ssdeep":"96:qXltSuI9wmR0UKsUhsf2nM7wtVuqbfWWQsj7NuOsCJR8UkN90DbVgrLhu321PX:gtnI9fyUKG2n2yVzbHfNuObRxZgLhu3C","tlshash":"c9d18ec9960d718faa7327755dc24246fd82fc862263302819298db5151e6bbfdeb24c","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.645119Z","times_seen":51,"resource_available":false,"data":null}},"time_used":27939,"timings":{"blocked":27463,"dns":0,"connect":0,"send":0,"wait":372,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1598234494512.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.037Z","timestamp":1790341639037,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1598234494512.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:47 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-5f3\"\r\nExpires: Sun, 25 Oct 2026 13:07:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1523,"size_decoded":1536,"mime_type":"image/png","magic":"PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced","md5":"34d7060ed4afc87e08453e656212eaf5","sha1":"130826732aaa43f12151404837d89c64b86cdf57","sha256":"b03819e23f38822a205cec1de62c6fd54be6130ad869302b10a81891c4a86b9b","sha512":"437bf14baf7121c6323e3109bb075e9a89159f0c5ad25496d6236d4c29712b5a2f0bbe5c59480f49f3e2afd8eb7f26ce72a5d865454ca641075c7979805f1a8c","ssdeep":"","tlshash":"96314083c3690a73f26969bafa52576708945d77b140cc9090c7741f8303fb62db2c59","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.629048Z","times_seen":51,"resource_available":false,"data":null}},"time_used":28390,"timings":{"blocked":27698,"dns":0,"connect":0,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670464940957.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.059Z","timestamp":1790341639059,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670464940957.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:24 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:04 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffc-55dd\"\r\nExpires: Sun, 25 Oct 2026 13:07:24 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21981,"size_decoded":21997,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"47c4e1653622a1fe6a6d29736e4782a9","sha1":"39e6ea5f9c6ed748d9656bec60eed6a92f65eaea","sha256":"81d7276a6a7affe25fae958867ce07ce02a9af8b11b8924ba1484911b3cdf6ac","sha512":"54bdd3cfdba76815a2275d9564c7797666340a5a027dde96c7b744c186d4733e9a2272523c388ddff7273dc0d99aaca5535e25a1bece6c49115942464e4dd106","ssdeep":"384:Gmdg3I0z66W3a3rKOon2XE2GnsPIjQ7qbuoiR/S0oBOIEl8E:BdupzgMAn20VPjsxSSIq8E","tlshash":"21a2cf85e2b7ddab4ed8076104853f670523056052ab0d0a4df6eb234b2a3c7fa5b65d","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.612352Z","times_seen":66,"resource_available":false,"data":null}},"time_used":6372,"timings":{"blocked":5102,"dns":0,"connect":0,"send":0,"wait":400,"receive":870,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/close%403x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.112Z","timestamp":1790341639112,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/close%403x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/cn/resources/components/right_fixed_list_8.ftl","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.855Z","timestamp":1790341642855,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /cn/resources/components/right_fixed_list_8.ftl HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nETag: \"68a026f6-8a\"\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":138,"size_decoded":305,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-27T11:51:46.584294Z","times_seen":332589,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/index.css","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.947Z","timestamp":1790341638947,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 13 May 2023 22:33:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6460101e-2343f\"\r\nExpires: Wed, 23 Sep 2026 23:25:17 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: CDN\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144447,"size_decoded":43407,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bdd55892740b0ced417b93f90720187f","sha1":"8212a160c8696e0268b183c8cf9c0ba490d7ed10","sha256":"03f2a27c6e38c3e8e38b294c2d0c3536b989ff6285388172542b4bedf10291d5","sha512":"13d51d13fc35bb501e8ddfd7f69fb155e2ab03ff2c7258af0b03db1fcfb3442f1412a58f13e17ee940b26e7249843696bd234e4de79a2600926bb03ab63a3ddc","ssdeep":"1536:K6GtHLPCmeh7NrFQ1JfWnh2KyehocrsWalA16R2AfP1Iz10VfKV:KZHKrFYpAhPAfNKaKV","tlshash":"b9e3d42746c0239cb31bcd259bc0a6c5e228c123f5125be9f145ba2dcfdbf9611a275b","first_seen":"2024-08-01T23:38:46Z","last_seen":"2026-09-27T03:24:50.643208Z","times_seen":86,"resource_available":true,"data":null}},"time_used":1260,"timings":{"blocked":-1,"dns":0,"connect":271,"send":0,"wait":281,"receive":432,"ssl":276},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/jquery.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.954Z","timestamp":1790341638954,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/jquery.min.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 97362\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:18 GMT\r\nETag: \"65f880ba-17c52\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97362,"size_decoded":97610,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (32060)","md5":"cbb11b58473b2d672f4ed53abbb67336","sha1":"66f47b885d587aa9a6c453ae3f2c9a382e5c7ec7","sha256":"5f1ab65fe2ad6b381a1ae036716475bf78c9b2e309528cf22170c1ddeefddcbf","sha512":"2bb663ecf1ac1e4d9fa58dc9c2f6eea3d9ca739e353287c5aeb2da5143bdcea8219c9c5b677667df95bf65e5ef6d3d91b52ba3c466f0f0f824aa9a195d76c687","ssdeep":"1536:eYE1JVoiB9JqZdXXe2pD3PgoIK6alrUSTJWFk/zkZ4HWLZoHsrOa99fwk6b7/Hpu:V4KZ+S3WLZICOaLfwk67qD1PaUa98Hrn","tlshash":"ee93e8d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:07:02Z","last_seen":"2026-09-27T03:24:50.647505Z","times_seen":9761,"resource_available":true,"data":null}},"time_used":3701,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":2817,"receive":571,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670464819253.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.047Z","timestamp":1790341639047,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670464819253.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-c629\"\r\nExpires: Sun, 25 Oct 2026 13:07:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50729,"size_decoded":51066,"mime_type":"image/png","magic":"PNG image data, 540 x 600, 8-bit colormap, non-interlaced","md5":"63bbf2a633b32318bd0a671c742c5406","sha1":"032dfc9ddb5d48e838b9094e33605181d2737244","sha256":"01c03e9077bb6883882d0ea10d36daac47993b51d2eb7e460106df86fbdf913f","sha512":"297a631264a46862fce0401fdf23d5da901f585bd7e9088a6e32df479feb81c9ff2554b3de886c1116195eab5dfff021dad710e38a51c483b5617f801e14379e","ssdeep":"768:GMbT/1niu3drWmVs0GohT1sRY2BCBz682iUQaZaK7DKfgQiaP9in3Kha96w5Z43x:nT/1iuhfqmT1G/6ke82gBesYnob4","tlshash":"c033023bcce74609b51204344edaf162723f825de79b28829b5abd56d7cb23d44c443e","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.629998Z","times_seen":63,"resource_available":false,"data":null}},"time_used":8294,"timings":{"blocked":4203,"dns":0,"connect":0,"send":0,"wait":1121,"receive":2970,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670467001811.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.051Z","timestamp":1790341639051,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670467001811.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465978629.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.055Z","timestamp":1790341639055,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670465978629.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465991618.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.058Z","timestamp":1790341639058,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670465991618.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1707358886429.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.098Z","timestamp":1790341639098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1707358886429.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:33 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-10cb39\"\r\nExpires: Sun, 25 Oct 2026 13:07:33 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/icon-totop.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.106Z","timestamp":1790341639106,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/icon-totop.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/vue.min.js","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.949Z","timestamp":1790341638949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /vue.min.js HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 13 Aug 2021 20:13:20 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"6116d260-16fcc\"\r\nExpires: Wed, 23 Sep 2026 23:25:17 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: CDN\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":94156,"size_decoded":34851,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65444), with CRLF line terminators","md5":"0a9a4681294d8c5f476687eea6e74842","sha1":"10c79dd8fcda1d0e498fb93d0d0a30ae91630ea8","sha256":"e6e28a8fb9b74533ece152229dafcc3ebc0f4b3dcd62879df115706bce55927d","sha512":"b218285324028cc9737add035787fb10d40b60d5e97884c832847f39041ff2ee73da86ca9165dbc75a0b830e496375d096f04e84b1a7878d86883c64487e1272","ssdeep":"1536:iUsY7qfIDMIL2u0lgK44R82g9p5q2lMVkxPDs4g2w:iYegDM62uqiq2wkxL+2w","tlshash":"009309dd3289b07157eb31f1107f140bf2366919ac0ec194b122e4d67db984d92abe7e","first_seen":"2023-03-07T01:40:19Z","last_seen":"2026-09-27T03:24:50.620387Z","times_seen":4134,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":276,"send":0,"wait":270,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697867046.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.003Z","timestamp":1790341639003,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697867046.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698197343.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.020Z","timestamp":1790341639020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698197343.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 742\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nETag: \"689efff8-2e6\"\r\nExpires: Sun, 25 Oct 2026 13:07:44 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":742,"size_decoded":1043,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"a93d7e2559449220705086bb1f58c31f","sha1":"41be2743530eeecd2702753bb30f1c82a21e5e38","sha256":"e03ab8ac4a9ffc80afed6418e63d04f4850c32fe0f5d97fd92f10f232384d9f4","sha512":"ba84b1b184e67ff692fc2ede71ac32f8c302f8802cf0841755cf891488ab5f7721bd5b82932d0444e2241074e4cfec0e57aeaf82a91c2362576adcb6edbad33a","ssdeep":"","tlshash":"d8019493de5cb4bfca168232232332e0ca38014732a96f0f2f0856328c670c1f875c8a","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.675139Z","times_seen":58,"resource_available":false,"data":null}},"time_used":25605,"timings":{"blocked":25235,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/favicon.ico","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:50.595Z","timestamp":1790341670595,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 25 Sep 2026 13:07:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nETag: \"68a026f6-8a\"\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":138,"size_decoded":305,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-27T11:51:46.584294Z","times_seen":332589,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575699932344.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.998Z","timestamp":1790341638998,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575699932344.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1607418407873.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.002Z","timestamp":1790341639002,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1607418407873.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698483116.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.033Z","timestamp":1790341639033,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698483116.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 769\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nETag: \"689efff8-301\"\r\nExpires: Sun, 25 Oct 2026 13:07:46 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":769,"size_decoded":1070,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"4ac8786d2bf1052479f7e0bc637df52f","sha1":"eb59eae338ee930da01990cb6bae325c16dfc2cb","sha256":"7576f9178fa72cada70fd32b64faf23d99101ceb5a67a36cfb055171a564d4ea","sha512":"ccebb45db25d4a94ab4783777eb776f238a4737ac00c7bb9961a9e0b54912284641076920603fe164eb401ffc6b02a90503c83046db09f6efb836feac2a1e8df","ssdeep":"","tlshash":"1e017b0bef52396f1a9584658b133ac1d6b6085b71416f8f0fa11c304d732d4f57ac52","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.637442Z","times_seen":51,"resource_available":false,"data":null}},"time_used":27463,"timings":{"blocked":27094,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466110599.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.065Z","timestamp":1790341639065,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466110599.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468530370.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.091Z","timestamp":1790341639091,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468530370.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465948261.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.099Z","timestamp":1790341639099,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465948261.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:33 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-5ad9\"\r\nExpires: Sun, 25 Oct 2026 13:07:33 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23257,"size_decoded":23449,"mime_type":"image/png","magic":"PNG image data, 420 x 330, 8-bit colormap, non-interlaced","md5":"a6c23a319e94a964eb6ff6838c458642","sha1":"5800669e99e002105a15c80467d26e865c30cbd7","sha256":"e59ce6edb93c2bf25ce3b4be554706276eeb1e54167969c161be9462bdc6a693","sha512":"070facd499bb403d11c748b47c4e640108509dd93aacb1b1a129720cbe92bf99f850f4560c1fcc9b3b67c3cb93ca71ffdc0bc0ab42bc9887c2b964c5608c70a2","ssdeep":"384:OJM1yw3/nP7M5od3bpmgXFgCyQgPYfyNBFFfBkvgEMEBfVTXXiaYVqhwYMtPS:eXw3/Pdd3bUgaCyLQfiBjwgUfVTni/GN","tlshash":"0aa2d0055803ef7ff5f230469008e626e99fa04528950ec150887b93fe477ade6c98eb","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.644129Z","times_seen":65,"resource_available":false,"data":null}},"time_used":15238,"timings":{"blocked":14363,"dns":0,"connect":0,"send":0,"wait":811,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/resources/fonts/fangzheng-unionpay-black-sc.html","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.820Z","timestamp":1790341642820,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /resources/fonts/fangzheng-unionpay-black-sc.html HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/css/style.css\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 21:45:36 GMT\r\nETag: \"689faa80-92\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":374,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-27T11:45:43.762077Z","times_seen":563468,"resource_available":true,"data":null}},"time_used":679,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1586924447851.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.011Z","timestamp":1790341639011,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1586924447851.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:22 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-ea8\"\r\nExpires: Sun, 25 Oct 2026 13:07:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3752,"size_decoded":4115,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, interlaced","md5":"61ee9e7a7d0abaac30676f3ea78dbe6f","sha1":"e199263f7a17ea566a713584140c1b42bb0c1dba","sha256":"5f53a7e3c5b0aae4d8b22dfb5f6879ff24fb69bc32862d5010aaba1ade2b590c","sha512":"793d70baa2aa7e5a1ad3ebdf280181d6702b48d3891abfba5979379fc14fc41de421b6a3a96ebea011c1bf900144bca6a294db29d3f6242333114961b1c4973c","ssdeep":"","tlshash":"35716c103617ec3f15473c695320ac30fda2d8d4874097a75bbf033d109563ea0e75a0","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.606744Z","times_seen":59,"resource_available":false,"data":null}},"time_used":4074,"timings":{"blocked":3573,"dns":0,"connect":0,"send":0,"wait":495,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465540474.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.100Z","timestamp":1790341639100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465540474.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:34 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-5c54\"\r\nExpires: Sun, 25 Oct 2026 13:07:34 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23636,"size_decoded":23996,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"9f98cdb60d2f7d4fc65d70ed67d1f53a","sha1":"4b0d21bf86cc0fa408d06061c8734bff2af56c32","sha256":"35d98f52ebc817a29112efbc0ac8c152a94a31aa38b0be0d14cbc526ea4a67b3","sha512":"b749ae6160c224680564f0c9d75de366478af1a70491c6ef0548f5be8953f82a0009544e03c3e6c3fd7de7289467df46d13d7b98b891cd4a6f08f934fc40ce99","ssdeep":"384:+Kby884o+K7kMYECpqux82htcn3T8npN8Ffc38/Uk0xvwE/9yxIq4jY7plaJvsT8:7e8bo+K7k5wutC3TMAJcM/qTIIAlaJkQ","tlshash":"f1b2d086e80c1e633b01f3ac1111d6a0e6ec4ce13a1cb17dfb67394add99e1b5939a52","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.656103Z","times_seen":65,"resource_available":false,"data":null}},"time_used":15753,"timings":{"blocked":15023,"dns":0,"connect":0,"send":0,"wait":372,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/unionpay-logo-white.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.107Z","timestamp":1790341639107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/unionpay-logo-white.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:40 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-c426\"\r\nExpires: Sun, 25 Oct 2026 13:07:40 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50214,"size_decoded":50519,"mime_type":"image/png","magic":"PNG image data, 525 x 132, 8-bit/color RGBA, non-interlaced","md5":"17582e2e52eb1611e1341233fe557301","sha1":"e683a0b4b361931fedc5cd2c9410a461b54d939c","sha256":"8c5a4190f0d15d24028d1a9277815fdbdf22c222cd86ea219860d08200942914","sha512":"0746b07393c4e6ef2cbb201f803a1626aeab188d396a5e6d603afb8314797861ccdf0f3a19e5929fba3d104637b3afae6479de8f639421148b8b191f8ba990b6","ssdeep":"768:EfYY5kqT5kjkbDHiw35kBlBxja7IXUbAAA4DEoCpIFm8nAoNo0CO9Okn2AxO2hmO:Gb6obDCikLB46w5A4DELz8PNpvOwhPv","tlshash":"2a33f117e35a80080d95c92027692f37d57fdb1b82b37b5598b98296f80732aedc26d8","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.644601Z","times_seen":61,"resource_available":false,"data":null}},"time_used":23478,"timings":{"blocked":20777,"dns":0,"connect":0,"send":0,"wait":372,"receive":2329,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1677115956495.html","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:22.755Z","timestamp":1790341642755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /%27https_/cn.unionpay.com/upowhtml/cn/templates/material/a5817a4b821640e5a850c5b9da5687c7/1677115956495.html HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nCookie: Hm_lvt_3be6c5b80c46daeec4561c12bc54d990=1790341641; Hm_lpvt_3be6c5b80c46daeec4561c12bc54d990=1790341641\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 21:44:12 GMT\r\nETag: \"689faa2c-92\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":146,"size_decoded":374,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-27T11:45:43.762077Z","times_seen":563468,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/jquery.tmpl.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.958Z","timestamp":1790341638958,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/jquery.tmpl.min.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:20 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 6121\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:20 GMT\r\nETag: \"65f880bc-17e9\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6121,"size_decoded":6367,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (5869)","md5":"27bc9d7d86250652e125896d94b18764","sha1":"c4671823949d127df1151ec12ece59833db7659d","sha256":"af6592d435a34ae2cbc384c908b2000e3a33f3c3d7bace1a84ba7880a8a80d9e","sha512":"a6e234df27001a97eba75a717484b9a49a2f91b9c3316cf76882bda3bc947e535a927cbf52929d8ee2b3dd2d5031f7498f55d4ab7aab80278d28809ca57e181c","ssdeep":"96:IDpf9JMNxOPifS0/ekHE01RftBV5fC59OoYCKRj8zdMMgWQsDe7dMJSd7vl:47OSkekP1RftB/Cq5Ck8zdNZQsaMJQ","tlshash":"64c1c8aeb29576234bb33478c1fb015bf23ab65b458c4c76d044e58439344a892faf7c","first_seen":"2023-03-07T12:23:44Z","last_seen":"2026-09-27T03:24:50.617598Z","times_seen":710,"resource_available":true,"data":null}},"time_used":1717,"timings":{"blocked":1219,"dns":0,"connect":0,"send":0,"wait":492,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698109238.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.014Z","timestamp":1790341639014,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698109238.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 913\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nETag: \"689efff8-391\"\r\nExpires: Sun, 25 Oct 2026 13:07:22 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":913,"size_decoded":1214,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"a5de96bbb4069ac142a4eb514e3eaae3","sha1":"519322fa1b6827077ab11c36c1788557981796eb","sha256":"da72bd450f3e24b93d1e12272c4ec5b566fe7dba8ca7fad38c2043f7519269cc","sha512":"0fbf1096a7d6eeb09183fac2ae63b3fa6617df2bc80e73d81709c8298b4e9e7ef4523f7583063bdda3b20cf345a840bfbeb9437a1fc86cd90683661422a3b681","ssdeep":"","tlshash":"10112b83e817301fa702205a0e833ac3e43929a7b4156b0baf192026a9512dcfa00a13","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.674479Z","times_seen":60,"resource_available":false,"data":null}},"time_used":3955,"timings":{"blocked":3573,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670464638051.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.049Z","timestamp":1790341639049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670464638051.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:48:46 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f810e-1109b\"\r\nExpires: Sun, 25 Oct 2026 13:07:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69787,"size_decoded":61768,"mime_type":"image/png","magic":"PNG image data, 540 x 600, 8-bit/color RGBA, non-interlaced","md5":"0e4c084580a2e151e17291854281cbc3","sha1":"df51aea72d910f935037f68a871f0163aec439ca","sha256":"c9cf8f89fbe96ddcd58c01d13174c4598848e7012c41b2b74d015d4b31deae1f","sha512":"bf582eec70363fd7e295083d7e4b84f2d4ed49cf26c452701666fd926ca22095a401be4804263d7c056f0398108f213c939bde02ecc1636cdbee3f79762a9d64","ssdeep":"768:AHb3wGXrDqNlgEYM8TRQDpyErUd6v+CTp5BrHcwXopqrM5XthXA7n/7iATbHCO0n:GfqEEYzRyMqYTmpTvXoWOXlaJUAPO","tlshash":"91638cc6f047b87fc255d0b3dc9fc1f658a039d1104acde16a5b9a7e2962225beca4cc","first_seen":"2025-11-04T09:41:56.113914Z","last_seen":"2026-09-27T03:24:50.683805Z","times_seen":43,"resource_available":false,"data":null}},"time_used":6712,"timings":{"blocked":4381,"dns":0,"connect":0,"send":0,"wait":372,"receive":1959,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466563662.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.073Z","timestamp":1790341639073,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466563662.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466576153.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.074Z","timestamp":1790341639074,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466576153.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/sina-icon%403x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.111Z","timestamp":1790341639111,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/sina-icon%403x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/#","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.140Z","timestamp":1790341639140,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698177293.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.015Z","timestamp":1790341639015,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698177293.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:44 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-ab9\"\r\nExpires: Sun, 25 Oct 2026 13:07:44 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2745,"size_decoded":3055,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"3d88db583e211f190d07774a9e165a3f","sha1":"6b3f91250f5a20edf50abec65397c6f19da3df93","sha256":"9dca61a3b53aa6682265fb58132192d76a957844ac6dbb2328b5025184a8e1ec","sha512":"840f39ea516ca30d396b978ab8b267f5cdb35686b2d94131d2d19d282684d9b9d962942957e2c8ca14971f03c7614f55fb40c26ea0eff7451d4aede2a7a6a81b","ssdeep":"","tlshash":"ee513b9c664371d89dfc154a60fb497045e0ad1216a903edf88708b33c72c6e3a65bbf","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.639855Z","times_seen":58,"resource_available":false,"data":null}},"time_used":25109,"timings":{"blocked":24733,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698401392.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.029Z","timestamp":1790341639029,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698401392.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:45 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-85e\"\r\nExpires: Sun, 25 Oct 2026 13:07:45 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2142,"size_decoded":2476,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"b38d745eb96baa643cacb7b59e5d9c5e","sha1":"022f93a299104dd7ea8aa47e672d8723678c1b5f","sha256":"07d29fcae3e7add3a44d04f0c880d22beac60cdee0db2b18ce916b0c5dccd322","sha512":"e8b80d2f701d0f41dc008b50a076c61a77f3afe499c0dd634a71dc7d744d5b63373ce287d411499d05b691f86aeed513be32c6f9a86e0d112bfabda84b6e8f99","ssdeep":"","tlshash":"45411a119f57b3255bda4e731804a6c0cdac27cf581ced3bea89c1de4305d2671d548a","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.663515Z","times_seen":51,"resource_available":false,"data":null}},"time_used":27328,"timings":{"blocked":26541,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575698109227.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.013Z","timestamp":1790341639013,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575698109227.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-1139\"\r\nExpires: Sun, 25 Oct 2026 13:07:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4409,"size_decoded":4763,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"1e240a6ce75abf46f1527a8e1c47e18b","sha1":"e761cc755adfb5e81f458d1d3667005d171e0c3f","sha256":"03718dd3445412d6a3d350cd597d73de456fef4b583eb37c94ab4e9c553cfa87","sha512":"7400300a2ca75cafb7724dfa20a7cbfb66dbd0825865ef2fbe4c87db8e1b47b13e438d0a2b6a23a5feb30bcfda675259c5fc672c680290b934c0700da438b33e","ssdeep":"96:Q7QMnqa1t7cNhUcQM8WbBBNttm6793mZntUi4UtPV7U2Za:sQMnq0t7G5Nt9sZnKib82A","tlshash":"f6918dd0d01c2c942b13945eee69f8d06888f587c9c501e50b0aa98c7790f3576d07ad","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.673922Z","times_seen":60,"resource_available":false,"data":null}},"time_used":5106,"timings":{"blocked":3573,"dns":0,"connect":0,"send":0,"wait":1527,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/style.css","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.917Z","timestamp":1790341638917,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:20 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65f880bc-5488\"\r\nExpires: Wed, 23 Sep 2026 23:25:17 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: CDN\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21640,"size_decoded":4484,"mime_type":"text/css","magic":"ASCII text, with very long lines (377), with CRLF line terminators","md5":"a291f77f4d241a1bbf72a1f6d0da3770","sha1":"c9d168759ce0df7d934c6519d33a62a41c91a52f","sha256":"54ae8c53edb0eff03f273dbb5f4d477ef8791cc71488e7e0e2ab6e92161e3b15","sha512":"28c2eeead845545fd4ef8b56f6eb822612e17dc89a802f6405325b7bc4cf357fe3ae506493fe09ffbaad6a8001f8f5db93bb1c00822a5178d4e357d418c677b3","ssdeep":"384:RBhA7wOqtJv+jFDiNBBwQ59aQ1kp2E6a8UQBKGQUUgv2Y/vXn/W3hnCnPZFT38qo:fi7wOqtJv+jFDiNBBwQ59aQ1kp2E6a86","tlshash":"39a25337a2512108b937e5efe566a75a5dbfc023d36012fc71da69188fcb4870472dca","first_seen":"2025-11-04T09:41:56.076305Z","last_seen":"2026-09-27T03:24:50.665548Z","times_seen":43,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":260,"send":0,"wait":269,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/search-bai%402x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.993Z","timestamp":1790341638993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/search-bai%402x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-41a\"\r\nExpires: Sun, 25 Oct 2026 13:07:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1050,"size_decoded":1410,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"493f319f7fc5e79fdff9aea428a93901","sha1":"2031e8d437a934b77f5ad39842ab9cdf390174d7","sha256":"7fc29314706a286dc1addcd159b5ab43b02260ba84f804ad860d3eceb8162e91","sha512":"c291182c004adf055a0830d37b24fe40588a932bae9ca621b15025c83a09a0e0517567d13950f3c46aee50249ed563c8f5823a05fe627a0d413a64ac9d35a503","ssdeep":"","tlshash":"9b11b5ce6112b7a88451be7001fe111eda35ca1c234ed246c44799fb9bece0b56c99ab","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.670225Z","times_seen":56,"resource_available":false,"data":null}},"time_used":4455,"timings":{"blocked":4076,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1607418502532.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.007Z","timestamp":1790341639007,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1607418502532.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/bannercover.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.042Z","timestamp":1790341639042,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/bannercover.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:23 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efff8-802\"\r\nExpires: Sun, 25 Oct 2026 13:07:23 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2050,"size_decoded":961,"mime_type":"image/png","magic":"PNG image data, 1920 x 580, 8-bit colormap, non-interlaced","md5":"8766ad758ced4f8a4fca4eefb22e3bd6","sha1":"4ba130c55a90066c0ac9d6315c63d7486d4c7892","sha256":"32a584dabc684f489b563aec23d11eb954194e5cb28e2f900a872b8da5038548","sha512":"a101a9461adf2176ac61ce15a24c4dc5710e76fd4678cfeedd870b30a671b412a385102fcda34e9eee400a031d8471e4f41aea143cd976db2be04fbc697c0404","ssdeep":"","tlshash":"7041e55eb9912d01e144f6b324f6801e5d438840a998e09778ae9c1709b53fd596d5cb","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.667565Z","times_seen":61,"resource_available":false,"data":null}},"time_used":4494,"timings":{"blocked":4123,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/icon-left.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.092Z","timestamp":1790341639092,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/icon-left.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:27 GMT\r\nContent-Type: image/png\r\nContent-Length: 551\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nETag: \"689efffa-227\"\r\nExpires: Sun, 25 Oct 2026 13:07:26 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551,"size_decoded":852,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"ed39684a8e427083e286b43ab36d99a2","sha1":"f94077565e6b1b629294ef6836228e5449f06e26","sha256":"2783dbd84deff385e3656d2fb63adc5b71a7cb55bb10c59d8bf3cfc64c8f4e33","sha512":"97e5ec0768d72204fa4f3c461265f42be5d91531f380f0886c4f44053f4d1ceb94ad02ef114c7bfa8c9f1e67bb05dbe0546db87a167470b960b22cfdf7a21fa6","ssdeep":"","tlshash":"c2f020e1e721ac544d0c51b2cf9250906c534f45d126125f2eeaa228aacd74e4a65773","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.614454Z","times_seen":66,"resource_available":false,"data":null}},"time_used":8092,"timings":{"blocked":7717,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465754520.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.102Z","timestamp":1790341639102,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465754520.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:34 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-4886f\"\r\nExpires: Sun, 25 Oct 2026 13:07:34 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":297071,"size_decoded":297521,"mime_type":"image/png","magic":"PNG image data, 795 x 795, 8-bit colormap, non-interlaced","md5":"556d99a6d6081b32b974e72e515079e4","sha1":"967f0b12cc3295b2df76c733dd968cc24bb5839f","sha256":"47c02e0507a01144b2301d14137c5fdd48a32592d838f5d6363152ef5fe9a499","sha512":"6267222dc2eb96aaaf6c197f51ebc96665b2a6662449cea9a3747901678e8799890a0c3f7e461e7d6b4ebf9eb656c8f34e5a34c0d8e5dc947eb4d1c664b63582","ssdeep":"6144:eJ5paFHpf6PYUNVBuYWltY0NegjpqsdJXqoOS6psWvF8Na:cpan6PYKBuYsYEeadJ6sO7F8E","tlshash":"96542225d4bd2eb0a66df228e8671b94477f4518b6d734903a103a8dc3633ef80e7792","first_seen":"2024-06-22T13:00:03Z","last_seen":"2026-09-27T03:24:50.642714Z","times_seen":60,"resource_available":false,"data":null}},"time_used":23864,"timings":{"blocked":15614,"dns":0,"connect":0,"send":0,"wait":377,"receive":7873,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/jquery.easing.min.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.981Z","timestamp":1790341638981,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/jquery.easing.min.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:21 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 3784\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:18 GMT\r\nETag: \"65f880ba-ec8\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3784,"size_decoded":4029,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text","md5":"15acb055a0b069def53772cea4c37bed","sha1":"680eab6cf59f830899694bfdfe4d55f12b7d9030","sha256":"32a5de5c85c783849083e3f37ce054508a0f82263634acd49d77ea4a9a21a817","sha512":"c898bb8826ec682ea96d9216eebfb8e8b7faa7a9901691ca47421b24d4266bba574dae1d7fc685788596fe89bb9b2c82f4c11d9995de9f39bca227f79b80f2fd","ssdeep":"","tlshash":"4771474c2cfeb1104313fa74860b9419b26dba574d4cef05fc0c4ea11f15a7a9ab3aac","first_seen":"2024-06-22T13:00:01Z","last_seen":"2026-09-27T03:24:50.679596Z","times_seen":60,"resource_available":true,"data":null}},"time_used":2883,"timings":{"blocked":1724,"dns":0,"connect":0,"send":0,"wait":1159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697867032.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.003Z","timestamp":1790341639003,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697867032.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466587956.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.075Z","timestamp":1790341639075,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466587956.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697723339.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.996Z","timestamp":1790341638996,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697723339.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575699953030.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.034Z","timestamp":1790341639034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1575699953030.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:46 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-f4c\"\r\nExpires: Sun, 25 Oct 2026 13:07:46 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3916,"size_decoded":4272,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"f9ec0efda20b946c3026fa5847f469b9","sha1":"065a808f24f6a884605572871f7c36d5b9911494","sha256":"b45b15cc94ebd91174e1ef8c3bc38909598886b5fe124f1de6de3f8d4f90e279","sha512":"85b24659359c33b6d0370fa1096264558135269a8a312cab5344805e6d64eb9a9cc0d5017b4d8bfc44128581d34498fd79e350e20fef52ee61898875172176b0","ssdeep":"","tlshash":"22816d8dc6696808489388d313f8d31135f8489a1dd5bad5de519c0cfa4134bfc40999","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.683253Z","times_seen":51,"resource_available":false,"data":null}},"time_used":28410,"timings":{"blocked":27250,"dns":0,"connect":0,"send":0,"wait":1157,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/download2.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.054Z","timestamp":1790341639054,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /download2.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1630548142389.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.095Z","timestamp":1790341639095,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1630548142389.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:30 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:45:20 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f8040-20b44\"\r\nExpires: Sun, 25 Oct 2026 13:07:30 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":133956,"size_decoded":131358,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1175x662, components 3","md5":"9e74d77779d58a00380c967918fb73b6","sha1":"87f16a2716c884e7d3542be52c89e40c1fc1e3b4","sha256":"e2718f22da00f64f4d84da7a550f1d5346548f346e91e8c286004612c9d13b5b","sha512":"af66002ce9f4543b86784b2412433c4ad54926fe102fbe8ff2d2cc86f52846fb66d4e2e2901f936fd9e0d65a842a032eb42155097a27dee3a8f48b6a3282939d","ssdeep":"3072:FNybAUxLOCdZISSzD+iDCbseuBUXxgPT46i//RgsnejkweHHfTlTmUli:XybR8jgs7UXmc6whneyfThxi","tlshash":"37d312b8e5a993a01d8d2c41e014df2ebb83c9422acc7e97d89a4236d1e3dff4775491","first_seen":"2025-11-04T09:41:56.118594Z","last_seen":"2026-09-27T03:24:50.680877Z","times_seen":43,"resource_available":false,"data":null}},"time_used":16842,"timings":{"blocked":11280,"dns":0,"connect":0,"send":0,"wait":406,"receive":5156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/index.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.983Z","timestamp":1790341638983,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/index.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:22 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 4495\r\nConnection: keep-alive\r\nLast-Modified: Sat, 16 Aug 2025 00:15:42 GMT\r\nETag: \"689fcdae-118f\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4495,"size_decoded":4741,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":3360,"timings":{"blocked":1887,"dns":0,"connect":0,"send":0,"wait":1467,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/d-i-pv-6%402x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.991Z","timestamp":1790341638991,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/d-i-pv-6%402x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:27 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:29:10 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f7c76-e2a\"\r\nExpires: Sun, 25 Oct 2026 13:07:27 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3626,"size_decoded":3692,"mime_type":"image/png","magic":"PNG image data, 68 x 52, 8-bit/color RGBA, non-interlaced","md5":"056b83a053526dac184fe547df66a38b","sha1":"f4031b38550d42c63d0fc7bd4ddd48cc1ac93c72","sha256":"11d1638ff7678696b8c328d9b9ed10f36e885f501917991b3f272fe683f690d7","sha512":"006a9b602082e3dd24a51c2a1fdc4cd28d53b6f09b972d12b76b250b3ea4b1318c99a3df8412a2b14dc61dfea72fdb4a749c041ecc98698750c7de392e8114e9","ssdeep":"","tlshash":"4a713d6ff405903eda58f237db2594e746376586612390c1a186857e3433dfcf0931c5","first_seen":"2025-11-04T09:41:56.088992Z","last_seen":"2026-09-27T03:24:50.649823Z","times_seen":43,"resource_available":false,"data":null}},"time_used":8845,"timings":{"blocked":8470,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1607418667167.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.025Z","timestamp":1790341639025,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1607418667167.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:45 GMT\r\nContent-Type: image/png\r\nContent-Length: 862\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:00 GMT\r\nETag: \"689efff8-35e\"\r\nExpires: Sun, 25 Oct 2026 13:07:45 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":862,"size_decoded":1163,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"b060f66cc709974a4dfc527c78a23bca","sha1":"bf36688144b84b2d71c6931831bae3b2987c3e74","sha256":"741420a7ce0626ad61ab2466a62aa4344d5774526e911eddd86d88a98303229e","sha512":"49a16eea300d695731959430948516e19fd4df75ffa2b73f278439db9f9dc9e98b28137a4fafa6485b33e4a74476d744f8830bcd02bc3e1b5a30b57f6c548d94","ssdeep":"","tlshash":"5011b883ec193b1fd26059364b17b7e2eaba1483b1119f0f9f8044724e6b8d4fab5c18","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.600144Z","times_seen":57,"resource_available":false,"data":null}},"time_used":26344,"timings":{"blocked":25975,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670492982898.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.061Z","timestamp":1790341639061,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670492982898.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:24 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:14 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65f880b6-150c3\"\r\nExpires: Sun, 25 Oct 2026 13:07:24 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86211,"size_decoded":85563,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1140x1380, components 3","md5":"2448eddc99ee6face112acf37fe0c41a","sha1":"cb36e2c40edb323b5c65eede9ca53fff5c5c2acc","sha256":"e1dc500b8326202607a4afff8b4ccc3ff2d5632e2315f6b9696da4445390b5f6","sha512":"5c8accfc4f235d085cbe77568ee526b9b932553cd9642555f3a14cd47f7af3dfaff62d16ef06e67c9a83ae5f7cad658177ba18fd9de97fbf5792427f0789187a","ssdeep":"1536:xULYTJGw2YeMxAzsuAd2Jpysr+mG1+HPY575Pjbva1W:xULYTwYAoAVKV+67Je1W","tlshash":"7b831289d1724a35ea501970f8f367e2df403a63aa94162bf06a8bf06df1d435fd46c4","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.603505Z","times_seen":64,"resource_available":false,"data":null}},"time_used":8667,"timings":{"blocked":5371,"dns":0,"connect":0,"send":0,"wait":821,"receive":2475,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466534175.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.070Z","timestamp":1790341639070,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466534175.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670468513467.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.090Z","timestamp":1790341639090,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670468513467.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/bootstrap.min.css","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.916Z","timestamp":1790341638916,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:18 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65f880ba-1da80\"\r\nExpires: Wed, 23 Sep 2026 23:25:17 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\nServer: CDN\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":121472,"size_decoded":20456,"mime_type":"text/css","magic":"ASCII text, with very long lines (65369)","md5":"78339abf40b97b14ddccbc92c7e72c44","sha1":"b1841e0bc8fe31981bb3f91722f53f59e41ed4eb","sha256":"992843e69eefab120990332af307ff57c96ff742e88ebc9ccf809d7be365c425","sha512":"b18309e8416ff87e7e9f17afbd8eba461a077b302448763e7396d241fe16c07c5fc014da38f9f5d959d5a0233caf728aee226cf4ef5ae56ad7d87ae82bee3e48","ssdeep":"768:rfIGxw/Tc/hOWlJ+UtVIuiHlqAmQI4X8OAdXFxbv8KIf2BdU+JdOMx1iVvH1FS:Vw/YGGIuiHlqAmO8l1bNXdOqT","tlshash":"56c3c7a0f21031ea7333c55a71d0ed872219a153e6664fb7f22f25d88f846ca1673f1a","first_seen":"2025-08-04T11:45:19.281751Z","last_seen":"2026-09-27T03:24:50.658546Z","times_seen":59,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/hm.js.%e4%b8%8b%e8%bd%bd","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:18.952Z","timestamp":1790341638952,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/hm.js.%e4%b8%8b%e8%bd%bd HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:19 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 30155\r\nConnection: keep-alive\r\nLast-Modified: Mon, 18 Mar 2024 17:58:18 GMT\r\nETag: \"65f880ba-75cb\"\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30155,"size_decoded":30402,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (995)","md5":"aa9553cf6f575a06116aad5de6ecfdaa","sha1":"70660b59b58477499b0f855d0de460bb91450d2f","sha256":"b0e33bfa668dde38593ee43d64184ac5ea78ee2a3cc1ec037381a4a433355f61","sha512":"171c4f43054b0bb35ae9c6fbc04d4ff599e0f0c5d3bf8ec863343909891e134600d391145bf396802a1cfafa56bf7f1777d71650139debdf4af1487381f61c84","ssdeep":"384:8rI5lo11JYTRl6scJxFVCFI/TayvuodiPIGm8kaR1oRwvuI/vePOpy04Euhw6:iI3qYG5gMdvusiPIx8SRwvuIXeWo03ov","tlshash":"89d2c8a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2024-08-01T23:38:44Z","last_seen":"2026-09-27T03:24:50.677705Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1725,"timings":{"blocked":531,"dns":0,"connect":0,"send":0,"wait":880,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670465185617.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.064Z","timestamp":1790341639064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1670465185617.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:26 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689efffa-2fc6d\"\r\nExpires: Sun, 25 Oct 2026 13:07:25 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":195693,"size_decoded":196108,"mime_type":"image/png","magic":"PNG image data, 960 x 480, 8-bit colormap, non-interlaced","md5":"aa7f2b3d474d65e3b9ae5ea78a5d7e36","sha1":"92b1a5b80a5e38890cc9960321c2db939e050c15","sha256":"96ec5f2f565653892c2e665fd0f3089a736ab997a2262d46a5716fa152786dd1","sha512":"c0366cc906a7d6a5be1e1ca0b8e2cccfa6caff6d899d46a18f5b671fc66d1afa603a0d645e7fb6c026aecbd0b80d265f804d2679dfa9f2fb77a08eed0bb19d1a","ssdeep":"3072:zNQI9P9z6kmThiw4l+9b3IX/Mx6Baz2R6KBBrvYrP1qXn8lLbNx3YfQB9RDNK:zNn9P8My30/86Ba26sY28lvDIYBnNK","tlshash":"301412cce80a450a09fffdbf024656a63971dac4305908d72e4aced27da5da9e335b42","first_seen":"2024-06-22T13:00:02Z","last_seen":"2026-09-27T03:24:50.605498Z","times_seen":63,"resource_available":false,"data":null}},"time_used":11638,"timings":{"blocked":6711,"dns":0,"connect":0,"send":0,"wait":372,"receive":4555,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466135786.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.066Z","timestamp":1790341639066,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466135786.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670493016170.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.076Z","timestamp":1790341639076,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670493016170.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670469035492.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.079Z","timestamp":1790341639079,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670469035492.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1607418407837.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.001Z","timestamp":1790341639001,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1607418407837.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/icon_search%402x.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.039Z","timestamp":1790341639039,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/icon_search%402x.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 987\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 09:38:02 GMT\r\nETag: \"689efffa-3db\"\r\nExpires: Sun, 25 Oct 2026 13:07:47 GMT\r\nCache-Control: max-age=2592000\r\nAccept-Ranges: bytes\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":987,"size_decoded":1288,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ea8b3f9d2de2678b954e299bd8b1017d","sha1":"bff1a6649d23620d6c0ebefc819c71e5232c6669","sha256":"7e09087052bf62d8876553f7467491f4209e7fe6cdf909494ea6a5e628f0bc99","sha512":"c4c1c4a5c895c38d1935bb78558eaa351b1286f2e8bc2c74220aec1272e0a61e86db649d65de677ef54945375497eaf4bf9db5b06001ac7e323b18b97978add2","ssdeep":"","tlshash":"e311c8f47f530894ce058d3a14578be3507ba0d46cfab9c84b27acb92adc41808b9841","first_seen":"2023-07-04T12:52:49Z","last_seen":"2026-09-27T03:24:50.616213Z","times_seen":63,"resource_available":false,"data":null}},"time_used":29443,"timings":{"blocked":28409,"dns":0,"connect":0,"send":0,"wait":1034,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1670466185615.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.070Z","timestamp":1790341639070,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1670466185615.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1634810742219.jpg","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"223.26.15.128","port":443,"asn":0,"as":"","country":"Taiwan","country_code":"TW"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.094Z","timestamp":1790341639094,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"676970.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 23:54:02 GMT","end":"Fri, 18 Dec 2026 23:54:01 GMT"},"fingerprint":{"sha1":"E9:BD:65:CE:7C:C6:2F:73:01:82:CF:20:B6:CD:36:CF:C8:C3:02:A0","sha256":"A3:62:51:87:EA:DE:45:A4:29:3E:3A:6A:0C:F8:5F:DE:94:B8:EC:E5:94:C5:4D:4F:9A:C4:8B:C6:8F:8B:56:5B"}}},"request":{"raw":"GET /css/1634810742219.jpg HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 25 Sep 2026 13:07:28 GMT\r\nContent-Type: image/jpeg\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Fri, 15 Aug 2025 18:47:40 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"689f80cc-27218\"\r\nExpires: Sun, 25 Oct 2026 13:07:28 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\nServer: CDN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":160280,"size_decoded":149459,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1313x739, components 3","md5":"1ced09abbcb7e9fbcf78b2d3099a67af","sha1":"a72533d317e98d37178e55d1a0cae6bed407e044","sha256":"ba5b400172fb3dd69a32f31e0c68f677f16ba251e5059f41ea27df2cc43c3ea0","sha512":"ab837fd59aaa2100b4d4a39fcc2489daafba8b405c9d4e9546d132813980829ff35bf1141baa9b1caee1a4c031f8ec6ba11db8fa7220327b39592a458089055e","ssdeep":"3072:PGMdJK4Gw8N2KfrAyVxqyX6ugNapWYTPYDu/KqzumyBoxVRDUmuP:eMdswKThrql/Na8YTPYDyyudQmS","tlshash":"9ef30224ea6e42c68ccd6a4b0600ed355b714fc063c939f6df706b19697cca58fb05ab","first_seen":"2025-11-04T09:41:56.127472Z","last_seen":"2026-09-27T03:24:50.680255Z","times_seen":43,"resource_available":false,"data":null}},"time_used":14363,"timings":{"blocked":9472,"dns":0,"connect":0,"send":0,"wait":377,"receive":4514,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/gz.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.139Z","timestamp":1790341639139,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /gz.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1575697908275.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.005Z","timestamp":1790341639005,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1575697908275.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"676970.xyz/css/1669797406166.png","fqdn":"676970.xyz","domain":"676970.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://676970.xyz/","date":"2026-09-25T13:07:19.009Z","timestamp":1790341639009,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css/1669797406166.png HTTP/1.1\r\nHost: 676970.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://676970.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T11:46:31.305567Z","times_seen":18686941,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"676970.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"676970.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}