{"report_id":"55c7e16d-81ff-4aed-a18a-bf2301dad632","version":6,"status":"done","tags":[],"date":"2025-12-27T16:04:12Z","url":{"schema":"http","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"title":"168飞艇官网开奖结果查询-全球PK五分彩历史记录168体彩开奖查询网+飞开艇结果直播|Summa Health","dom":{"size":4047,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4047), with no line terminators","md5":"2821f7c3c91314283aa1079c0c456aaa","sha1":"868d4ae048b90611ceae253c043d6eadeb0e7919","sha256":"1ddd52bf3dd0890d30a44faa8956098e331001946838790e1ce2f14ba2e90ec5","sha512":"e37225dd71d92436a78eb5272a6cbb69797cf9101e7780ad913e7efbde258ab388dc4aafd14d745632040cd7a9ec0e77c7813827886d0ae2866b139257606a01","ssdeep":"","tlshash":"6f816ef1a225d1b81007dfe0d1f0fa3976a371fefe95dea022e404916a91af4dc8c166","dom_hash":"domhash611a6e44d81e5c49fef174b91eac46e6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-31T16:04:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.api168168.com","ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"domain_registered":"2020-10-09","domain_rank":0,"first_seen":"2020-10-09T11:31:19Z","last_seen":"2025-12-23T23:28:54.402467Z","alert_count":18,"request_count":9,"received_data":73099,"sent_data":4234,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.airbud.io","ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-05-29","domain_rank":603863,"first_seen":"2019-05-06T12:34:53Z","last_seen":"2025-12-19T21:16:27.397912Z","alert_count":0,"request_count":4,"received_data":1445795,"sent_data":1649,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"43.174.229.25","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2025-12-22T02:36:04.857107Z","alert_count":0,"request_count":2,"received_data":723,"sent_data":950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.launchdarkly.com","ip":{"addr":"151.101.1.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-07-15","domain_rank":5566,"first_seen":"2015-06-15T05:36:08Z","last_seen":"2025-12-22T19:35:33.236578Z","alert_count":0,"request_count":4,"received_data":5514,"sent_data":2506,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"insights.sitesearch360.com","ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-23","domain_rank":295922,"first_seen":"2018-08-14T11:49:32Z","last_seen":"2025-12-27T06:41:24.445652Z","alert_count":0,"request_count":1,"received_data":379,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.sitesearch360.com","ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-23","domain_rank":298188,"first_seen":"2018-03-28T20:04:04Z","last_seen":"2025-12-25T08:41:51.720504Z","alert_count":0,"request_count":3,"received_data":461912,"sent_data":1428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-21T22:24:05.252763Z","alert_count":0,"request_count":3,"received_data":27889,"sent_data":1620,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":10774,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"chat.hyro.ws","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2023-07-06","domain_rank":741187,"first_seen":"2025-01-07T05:09:23.543638Z","last_seen":"2025-12-10T23:47:35.843896Z","alert_count":0,"request_count":2,"received_data":670,"sent_data":2016,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":1,"received_data":7084,"sent_data":468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.pacetonet.com","ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2025-12-27T16:04:17.400717Z","last_seen":"2025-12-27T16:04:17.400717Z","alert_count":192,"request_count":48,"received_data":5965022,"sent_data":25656,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"jn1680.com","ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-12-15","domain_rank":0,"first_seen":"2025-12-18T00:21:58.552132Z","last_seen":"2025-12-25T15:41:37.781226Z","alert_count":0,"request_count":65,"received_data":2263729,"sent_data":32249,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2025-12-22T04:37:39.172871Z","alert_count":0,"request_count":1,"received_data":1765,"sent_data":483,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2025-12-22T04:02:22.523112Z","alert_count":0,"request_count":4,"received_data":448807,"sent_data":2264,"comment":"","tags":null,"fingerprints":null},{"fqdn":"68816.global.siteimproveanalytics.io","ip":{"addr":"51.21.153.120","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"domain_registered":"2017-03-08","domain_rank":5884764,"first_seen":"2021-08-27T05:10:34Z","last_seen":"2025-11-23T10:21:59.410595Z","alert_count":0,"request_count":1,"received_data":304,"sent_data":962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.rudderlabs.com","ip":{"addr":"52.84.50.106","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-24","domain_rank":54152,"first_seen":"2020-11-19T22:24:42Z","last_seen":"2025-12-24T03:55:48.840302Z","alert_count":0,"request_count":1,"received_data":358,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"bd51static.com","ip":{"addr":"35.215.189.171","port":443,"asn":15169,"as":"GOOGLE","country":"Hong Kong","country_code":"HK"},"domain_registered":"2021-10-07","domain_rank":2891718,"first_seen":"2021-10-07T04:20:25Z","last_seen":"2025-12-23T11:52:29.707359Z","alert_count":0,"request_count":1,"received_data":1724,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.callrail.com","ip":{"addr":"52.84.50.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-02-18","domain_rank":68313,"first_seen":"2017-01-30T11:59:02Z","last_seen":"2025-12-23T06:16:01.233029Z","alert_count":0,"request_count":2,"received_data":2889,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"events.launchdarkly.com","ip":{"addr":"54.84.123.42","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2014-07-15","domain_rank":4335,"first_seen":"2016-02-06T07:13:26Z","last_seen":"2025-12-22T16:51:13.98948Z","alert_count":0,"request_count":2,"received_data":1035,"sent_data":1255,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2025-12-22T01:25:11.24726Z","alert_count":0,"request_count":2,"received_data":30880,"sent_data":1407,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7ca02f674dcd8322813757625c7e0cd","sha1":"8ffc8a6809980dab37008398c198188c5997d5eb","sha256":"f72f8b63dea1be32c3938059cf7cd605617c7d8d61e6515716daac2f9ce543cf","sha512":"0430e3cc1fac1d9aea9711a21529f01b0a8e62eb95999f0ebbee58bf70ce620514686a2a472d41b926f61591f97556162df0a0bf7417bfb1b0cc560da1a77fe6","ssdeep":"","tlshash":"f38000f320c008a3cc3080cf228b33cb28282080c00b323030820220a00e22380a02cf","size":34,"data":"","first_seen":"2025-11-23T10:22:06.130536Z","last_seen":"2025-12-27T16:04:42.459596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/pk10BaseTrend.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f6fadebe51378762442a2211edfef60","sha1":"abb6dd63e315112728f3540ef124480e4b1e9048","sha256":"441c3db4288867eb549306e2797b1075d745408c6674660096a9ed695435391e","sha512":"07072b7f0de691c11760da89619c378b0dbae068b540676c6bed50e9c1eb089716a1b235f10fb35730c3afe2ac42dc02ea67fbcc80e3551afc7d5507feb0d71d","ssdeep":"96:bWkh9UBeGm8ViMUrjjEgYQEHqSKFM4AJjCk:N0iMUrHEe0qSKFM48","tlshash":"43d1a919e1822126b25f3efcc63fd15880610fb0e598ee4c76fd9ab16d34ac65073d6a","size":6701,"data":"","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.67378Z","times_seen":1391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/config.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a197f7b85e5569edbf6eedc0b0f7ac10","sha1":"249708bb7926657f2c1a7c92ec785f16578f0c97","sha256":"3999e8c7107f1078913884d7101743d275cc04c73909b6edc56d010b87174b36","sha512":"80ac52238d5581708df7e82746711f5a61f52683cc384d217246ded9243e8a1fa81ff6a49ba88a630835f6b22c45407da08fd54fe0e83a29223aee6f89ff995c","ssdeep":"192:qSa/WVpaV8Sx4AKtPxlmrwGGfdc8tAFYXiw:qd6I+o4tPxESc8tLv","tlshash":"3e32211b845013a66173d779247a2e48e93e135f80158c5b3fbd4ac48f3be3a9059fba","size":10960,"data":"","first_seen":"2025-09-10T11:21:24.685343Z","last_seen":"2026-02-01T20:27:06.393031Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"b712c663a84159eb15e71203885cb00c","sha1":"3b88f0949602701b1423b87e4f63cf214d4bf7f0","sha256":"53065cded16447c2ad70e9c3ece54da39047224ac17724a9dd6683c1b605d7de","sha512":"fffd0a30ad86701ce6bd2580893c3d0932dd6ce09ca150e56c23b0b9183be2f0c9fdfb7f81319ed1e157986504982dc6059c88dcd49b716376127bdd36db0649","ssdeep":"","tlshash":"02f0c0cd2745d99934e77cbeb96b7d08114d0d342cde8cb89c11011128c2ebf11c12af","size":594,"data":"","first_seen":"2025-12-27T16:04:42.461281Z","last_seen":"2025-12-27T16:04:42.461281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/script.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff87168bcc5a20079bfe6a4b2091e60f","sha1":"b3ed44758f766c6e63b0cb3fd167a5a1e6771d37","sha256":"21694778adbe865b251141f23cc325a850b3bc35aa9f55f4477191ca6bb8d09d","sha512":"789a4ec458b0c6b1ffa9afcbdb4df18c87558ae7564d4f44776f945a83a292a3515532f1e61aeaca64ef740c32b3dd87baa00b895ed5f64aec798d569550ac55","ssdeep":"768:pRES7FVJrsRhaRA/2noPvGIGpEgT1q5VfQmwftg83+e7cahzAMjjnTyS+R8X2GGk:p+ICefg51Qmwftg8eY3mk","tlshash":"b3d2b7dcb698b16e03d231ac243f56067275ae24634480b8b168e8f95c78bcf4936f7d","size":30998,"data":"","first_seen":"2025-12-27T16:04:42.435177Z","last_seen":"2025-12-27T16:04:42.435177Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ca7facf24d7d639c87313e2e0846f06","sha1":"ccb4892ae216fb28bb49c85314fd1d1786d949ab","sha256":"73e4dc18ad56b04f83eae83d5fe88144437f0087848fd06c2803b58ce0ab4efe","sha512":"441331fe911a0f036c5afe357bac2ad6b2df133bd950305a550e2da3ad081bae3010a304df63b9357ff0889b00f0d4a08a655d11c0758868a884b25063602a7a","ssdeep":"","tlshash":"9d51840478a4f470b9bb57e7126fab0672f8173b168dc4a1d785fe686924a87c0b35c8","size":2507,"data":"","first_seen":"2025-12-27T16:04:42.462261Z","last_seen":"2025-12-27T16:04:42.462261Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"eventHandler","is_inline":false,"md5":"320bcc32736148a3250d36e7bf1c7fea","sha1":"7651e60b3db0a1e8e5829b8421e86d249b44dbc2","sha256":"faf62f9dfa46633ad0bc0da6e2cfc8b82c78db565ad2a8280619965eb296ab38","sha512":"d066c21efc6628174b6c83ff9d7d4a839af78b78db18e66a716105d761b9f6bf9f02074b765ae6eb6930118a4ed229bc4230a10f68a78c6c1cb9817b5a30a8f3","ssdeep":"","tlshash":"878000a80038800a0002c3080023c8e30000a80f0088838cbc0328c2a0b88000802ca2","size":34,"data":"","first_seen":"2023-04-11T12:15:08Z","last_seen":"2026-04-19T02:52:26.890851Z","times_seen":1643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-04-19T02:14:26.078034Z","times_seen":85768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.callrail.com/group/732226907/f1519ee45ab15a26a99f9b63/12/icap.js?t=1766851431417\u0026uuid=aed4644a-3d18-470e-8334-afdb8d7623f0","fqdn":"js.callrail.com","domain":"callrail.com","tld":"com"},"ip":{"addr":"52.84.50.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"428fbfbe32240731c2093be221cc8df3","sha1":"8b831bc780288cdfce6dba1a93d062c9379f4def","sha256":"1643b5cec44cc597bc2cce3448ce5434241eec9b92db8af268ee3ee1f198441d","sha512":"157c60a1a8619ad1e6162b3e945db8b6ec82b37359e23dcc8eccf9e2399662890c591a49046eef061e271a6f18c00a695ba1ac4837eab7b29ec37a36b4a542b7","ssdeep":"","tlshash":"9a700000300b0080e08a820300000000a00e208882082000030a2ac8a0002cc0238b88","size":22,"data":"","first_seen":"2023-03-07T01:16:02Z","last_seen":"2026-04-19T02:46:13.628204Z","times_seen":3968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/main.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c505ad579f07670dbed2a2e488addc35","sha1":"fb73abef2324577491741da70016ac998615b44e","sha256":"da0211c696afb1cbe381142935b276379b2f7c7023a529a6424cd07e421a6ebb","sha512":"9bdde49f4f4f35ddc7f2fef5fbf92b85a30fce2d52f50d74427eff5e081f6087def02110a35f3c000e9049421ce0eb35c370f2ab6e8c6c9cc6e54eda35315804","ssdeep":"","tlshash":"8d21afaf5a8531b0d57b2390caa657bcfe7a801747111cb07c1c7b224b79c930426eec","size":1227,"data":"","first_seen":"2025-12-18T00:22:10.527155Z","last_seen":"2026-02-07T17:18:33.470938Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"54fd5a5d8a1ae35d232eac9fb55fd831","sha1":"7bc37009db10e22687c6c0779009aee3a96022c8","sha256":"15826c042c987efd1d33787d4f404fd5938f19440e8248ea3c447a02fc2778c4","sha512":"bae5bba94940d564186a7fe5381898d68e565afb6dbba48e49550dac301147745c281f9f35a3605c987a49fd12ffe6e9e26b469d788b3d4cf33a4439d16fc1f3","ssdeep":"","tlshash":"0b80000820802000f222022bb0c80e8082200a0220a8a0e002088b88a00223200b3000","size":27,"data":"","first_seen":"2025-11-23T10:22:06.133638Z","last_seen":"2026-02-20T05:34:41.412881Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eeceeed148a1bbdb196c1b294980110","sha1":"b8a3f9a1f8da62577f387075fe73285f43c55dc1","sha256":"8fcac2d0931567bbc29c35cdc962c4cacc6c44ff8e6408d08c7cae0a3081325c","sha512":"4e8cfa2f23790458d39c69c391e166a3a931996edd202e57f8b730b9112a44bb5f2e9682939de97410c3bbd9f86c8e5fe04736b2ff2e0a0a17f467c69c91676f","ssdeep":"","tlshash":"38016dda8ce30125975310eaaf9bb610619b149b6500dc08bd6d8b552f61b8bc93bbcd","size":813,"data":"","first_seen":"2025-12-27T16:04:42.465871Z","last_seen":"2025-12-27T16:04:42.465871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/local/tools/tools.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"70327931ff11afadac61c0a94f15db9f","sha1":"d9965d83246ff2c64cd7750f53ed79a5b4a617b5","sha256":"7f25ed8e478477aa7864c3e50716f44384a306b1a55dd27508b1b64f603a8f93","sha512":"eecad4b4cd95ceb29e17a2eced1b53acb00a00b6ecaeb45a6b409a8e2c40a35861e7e0cbf388a4ebbf2be4228a31fcf579b09c3ea4298d61400e90d8bcd54f2a","ssdeep":"768:YhY+GyBfYY65VS27+8cVI+4T1NNa+Na0NaOqBaA32imH52FpJ8M/Q5tQ5deNj2NV:KtGWfYBVS27+8cVI+Yjvzqsni08o079","tlshash":"29a3a61a99702a5a417373b5593fe500f4214f3b01078846bc7ed6f85fb9a62a378fe8","size":103478,"data":"","first_seen":"2025-09-10T11:21:24.626443Z","last_seen":"2026-03-23T22:32:04.49711Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrmB_KWSlQAE7ZYeg_m4Q2fEerx6A/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfca7566c618715ddc872c4792068c4","sha1":"c9e0e1e5ff15fa615e04792cf9a97ba04de31afc","sha256":"a3f35fd4257fc20da36e4689e22dd89a9e77b2c97bef047a64c5d252c485e150","sha512":"287082c1363cd2cc6899a8227c705d7e71bfef13923180d56967243181b6fc1c0dc115ba8d8da3871b614756b2539cd2880beb1f34d69cad1cac5f1ec3e43501","ssdeep":"3072:xv0JwHWSIiKU4biEIiHNcDD1TC7VS5JdmeZfuz7AKUSOsQ+dWsNsDEp:SpNUTnigvJVsNsDEp","tlshash":"b424e7d9b35270669363f4a6913f000ea13b68a9f9484d6cb28de8e25df4d19017bf7c","size":223012,"data":"","first_seen":"2025-09-10T19:46:21.031861Z","last_seen":"2026-03-20T06:37:00.365078Z","times_seen":1865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-19T02:29:50.577464Z","times_seen":106307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"513dfa0c0e7175071321a80d01f09e27","sha1":"280f931070bc8f03d9c15b3b962cda295f1bd46a","sha256":"17ff01c2853596ab4df539f4257f0cce6bc71dde5cf7f123b9cee642d6b7c975","sha512":"675d8b9ddc649d9b18de6176dc567447ce79409f8f0705298b7b087dce6ef8becc599693c1ae804dd8ec5bf3d7be536878f14a771fecdc9db0087ec554d59549","ssdeep":"","tlshash":"d1c09297f5705a4b049ae10ad387488c72bc8509463a9e292791a0ca3eb3f9d0b0e1a8","size":132,"data":"","first_seen":"2023-03-07T13:18:05Z","last_seen":"2026-04-16T21:25:09.91112Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery.validate.unobtrusive.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7f44f12c126272b172557362aa8f436","sha1":"34839dbf78a27afeb0ff3642b5539d8d9c477754","sha256":"91b5c122e8cf2da8a1d8cfe630cd96ea1c3846e1dfad8c52a67561213bc22ad3","sha512":"579291c75011ef3c56dca078cbae24b9e141bde9fe10cb1e5961a9960bc6693a15d1f58ff26d8f61c9808f0218c78f52afa297246ec7b201a1902d092ab1de54","ssdeep":"192:zv+iwjx/Hx7W4zoR9TiweeAzTMEt7KQTkG98jWY7bF5Z78Le44R5SNK:SiwjVxxz0ehz7VX6CibFrILe44Xf","tlshash":"d3d154493395232b89ebb0f7988fcc0ab6b1566871c14449560c85f0ec7cde8a767dee","size":6555,"data":"","first_seen":"2025-05-01T12:29:51.974291Z","last_seen":"2026-03-27T20:43:28.618932Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery.unobtrusive-ajax.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6ff7a89ec6dc89eaafd9ad8155270fa","sha1":"e8e04677ac1f0ed65a68cdb6a25dc82f10f060bb","sha256":"09cfe1ee6bc855f6248c875274faeb56245ee2ee942ec1a21346e384e14b6ca0","sha512":"b02e77916884e26e0a24a13c345236fe6e7fef0ccd3fba1ee706ff951c37366f4e8e494d697b70a805229c5a1c363b2f919e49bc6d500bf618a5d412e40615e8","ssdeep":"96:T3AxGX2TXHcWHP4/ZxFlxzx4xRxqxhoxuox/xGVUx4x3rxTRx4wMfD809J4mkNzs:T3AxPqLJ+n8voEolYUixrtR2ZfDB9J48","tlshash":"c49198aab2803677ab53b1f5dc0f5c02b25573a8528348240d4ec0686c3dd7c9ffb9a9","size":4472,"data":"","first_seen":"2023-09-20T09:31:38Z","last_seen":"2026-02-27T13:57:58.592778Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3be25730c4ca7bcc5d5793041878f028","sha1":"bfb8769b1df683f70d1d2ea50249aa49d0303968","sha256":"13a6c3279974ed3b7480cf75dba565651a3c2bc9f3883aea5eb2c7b96459d4a7","sha512":"bd440151f634b9514162aca92b443d1f4088bd2538c0717e97036306635999ab6a8377b92ef0f0f5a25aa7e1d6da1a91ee03b8f7df2377c65febdba707124cee","ssdeep":"","tlshash":"e8e08c2974dbfa20827fb03a2b55644a6331a093400cdf953f5d252a7fb5b3c03d179a","size":349,"data":"","first_seen":"2025-11-23T10:22:06.137166Z","last_seen":"2025-12-27T16:04:42.468423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/jquery.async.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e3cd10cd7579756c32b479d018996ce","sha1":"f802c0231c81b061352b3c7bb4c64c143ce353f2","sha256":"9b52ff42b1430595e38ae165b5a8ac6719c0bfddf9407ef9bc720dc30f2d3e5f","sha512":"f268b0dfed8599261280098146616a56bf347d56edaae23924373d6f09c09df07eae57e89cd05fc86175aaa6e3c6d1e12a987a5ee5bb5d678a8e65db3a04c421","ssdeep":"","tlshash":"4a119cd87791a6050752b46c077f211cd23638141c1f9558b6bef4e25c1931eb12e9b0","size":902,"data":"","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.509716Z","times_seen":1391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/local/pk10/jisuft_index.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8802a3562b2c19a6d9393ea421eca75","sha1":"8e4a7935096dc7cde2df63835fcac41f8f9c34f3","sha256":"2ed2ad0e95c06d972e71ced9bad5eafd0e0d543630457d89cc2e90b4b8631140","sha512":"4e39539fac88b02ab699fe49e66879479ab6cf6dcaa1aab13031e9fdba740389e277e9dc9755ac38d450f6c078931e77f0c15ee127b39aa52e9a4f3e2e15da3e","ssdeep":"768:gZybdP2PNTC36k6cSe1buFaaPl7DM7HQ/+elxFi7UkpOUcFCtofJjQrwX:JdUclpW7DZwpOUKCeyrwX","tlshash":"4253080db2a2339f20fb21e2206f7a4680201d36d5014946f9bee6a61deed857477f1f","size":63975,"data":"","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.447617Z","times_seen":544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"7357e05af6b079d2966367f012303c7d","sha1":"a0c404290acd1a302998f6e0b90ca1e79d28e388","sha256":"206af3db45c9d7ba3057277d588da1e4b5295238bb401d8111f0242d1c1f3701","sha512":"8a28df73891ee1eca9410c4f17a522c5ea00b2bc98e24142c95feb2703316c45dfe2d5512a24018ea6c4de06e8f4da780da7fd043179004fb2f4c8e1851afc00","ssdeep":"","tlshash":"e5f0221cb4fab920803fb22a298e9648b3206153515cdfe83f8d63152fa163852f3788","size":630,"data":"","first_seen":"2025-12-27T16:04:42.469654Z","last_seen":"2025-12-27T16:04:42.469654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4654f0718980b99084ee95e09419e62","sha1":"7b34091521e3436015c60030c7ae3f6c9fd5f073","sha256":"7ca5ba83beb55a6372bc20cfb7ff98a282abc95415cf175bf0cd1acb447f7877","sha512":"869a7cea467a6b9c71c0a055cb0266eb5b22c3d8600218c72992b59bb3ff4aec8ab4bb1c1b6b7f480de455d6fa0d1b184254c626b0a1613a9ea1f48b8a5b638e","ssdeep":"","tlshash":"61e0683fdaf945304037f62eaa8fe704373b6183704d9c887e9c49c80f5065558f2a8a","size":412,"data":"","first_seen":"2025-11-23T10:22:06.142181Z","last_seen":"2025-12-27T16:04:42.47072Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/bootstrap.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"63534c9e99f47f6ef78f918a2c045247","sha1":"c49fcc7639bcb59147903caf71a4977c8fa19a67","sha256":"c7390975fc3e41ad5ec9d1870edc3103f7c498dd82dce4bbaf22a9e7bba96b77","sha512":"843e83f4a60732120e766f7c04053fe90235ef48ccf548cd0199a64e3f622b6dfd5aa0a0445198f74ece9b63149904e1c2af13db988c97bebff5c2d44007b1dd","ssdeep":"768:QklcnSRAIvHVAYIE8Pg76Tjx4vbh3p6viDl0TS6SXH6G7e6Pxh35CCmVlaFV:Qkl4SE0MJS36GPxhAV4","tlshash":"d043a54a7254787206df647a817b060bb3366c99a40a816cb8699ced2f7cd493277f3c","size":60180,"data":"","first_seen":"2023-03-07T12:03:40Z","last_seen":"2026-04-18T03:36:01.637037Z","times_seen":371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/plugins.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e3e77c7bc9751dbb2f8a1424a88ff22","sha1":"ea6bdb640b4c67c0799d1c5c9649bc8d353369b8","sha256":"a5290e3fca88744de30903f92ffc5e4b7f1d05d3c3bac62f42abd7b97d43f9ce","sha512":"118d6a9937c7b2b20dca92d900dcc393bd25aeaf888d9c108a476f14f6f78b1e2a23d4a5f9114b729c2a2cbc3e4da1ab6a82838dfc858ad7fb377e22bebede91","ssdeep":"","tlshash":"53e0c010fc8da42645ffb4acb4fb39c88f9c06134008c1f6e41c4c482c69b0744074e7","size":344,"data":"","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.661461Z","times_seen":548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"485a4da2afc86d3a6f28fa2f45851305","sha1":"bc0d1ed4b31dc9d72227fee74a9c3478889ba8c6","sha256":"91af46e1a17d8886e99149081dab1023d37e5d32bb2efd8e62561e59f19fb336","sha512":"1b9c9248aec060a5ab5a96f9bda177f3343fffdc38445234818065d0a63b92bdd060bf2bf31e6a980ebdb222fb41f7ac681bf5711870f20ee2320a197a17ba41","ssdeep":"","tlshash":"eee0223fd9ba55304037b22aaa8ee7447b2b2183700cdc89be9c04c81f5065958f2a8a","size":416,"data":"","first_seen":"2025-11-23T10:22:06.143491Z","last_seen":"2025-12-27T16:04:42.472101Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"eventHandler","is_inline":false,"md5":"320bcc32736148a3250d36e7bf1c7fea","sha1":"7651e60b3db0a1e8e5829b8421e86d249b44dbc2","sha256":"faf62f9dfa46633ad0bc0da6e2cfc8b82c78db565ad2a8280619965eb296ab38","sha512":"d066c21efc6628174b6c83ff9d7d4a839af78b78db18e66a716105d761b9f6bf9f02074b765ae6eb6930118a4ed229bc4230a10f68a78c6c1cb9817b5a30a8f3","ssdeep":"","tlshash":"878000a80038800a0002c3080023c8e30000a80f0088838cbc0328c2a0b88000802ca2","size":34,"data":"","first_seen":"2023-04-11T12:15:08Z","last_seen":"2026-04-19T02:52:26.890851Z","times_seen":1643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/siteanalyze_68816.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"39b74f49b3744c8371eb745ab0184273","sha1":"cc8f8c2b7fcf01235ae1e4d98897e44e488b553d","sha256":"7d31f8c0af13138e86291b8499d3a03b6966264d6230fe175af0931b1ccf0306","sha512":"108b8a8c8cb17fc8274839e3b07f492d1709eea672daa7c261d0f92f396608981ed9690d2d20b3031b11ee2aea04c51c1603409135603e1f0acd8dc3b5625222","ssdeep":"1536:7SpxIh1ufa1qxD4wXIy3rjtgu5JsDt1CPGP1/pq:70DB","tlshash":"df2319deb144603a07f7436a287f235db1372a6718889096f76ce9a41c69fdd006fe2d","size":49264,"data":"","first_seen":"2025-12-27T16:04:42.433153Z","last_seen":"2025-12-27T16:04:42.433153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/vendor/jquery-1.11.2.min.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","size":96382,"data":"","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-04-19T00:08:48.827807Z","times_seen":1655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=gMA/d=1/rs=AN8SPfp6pUHKsXNsMEC5QdH3_ke7hKKgIQ/m=el_conf","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"55b9047a0925695ee7511007380dc78b","sha1":"8f87c92c11778f019b822043c820c1f006da3b6d","sha256":"eed74353b63e3d48771f224decb304fcbb4a3199d71a391c89a9f03bc1993457","sha512":"a6b78e485e394dd0ae59eb05d456b0474ad9d91b2ea32682fabcc3028d67e1d805537011d1bd9bd47d3643c29731a912c2b0f9bfc770abc8e5aaa104d74bcdde","ssdeep":"1536:Xx5c4EtzSuSgUARQVzKhDHSFli6DZE7ijlv2sjiPwNWrY:Xby2VzKhzKpRjizY","tlshash":"fc73c7ccb6a671618267f5f5413f000fb23b59a9e8484dacf288d8e16eb5948413bf7d","size":78089,"data":"","first_seen":"2025-12-27T16:04:42.371291Z","last_seen":"2025-12-27T16:04:42.371291Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/cookieyes-fixe7e9.js?cache=20250829","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"260063cf7ad7aa5710a8d19f98a3fad7","sha1":"1cedc9adfa56c552ed9b433d4794fad04feccd92","sha256":"6db47121349d133e7b15fd33cf81cee184377cdfbc7a8ac44208a8fec7395e21","sha512":"a927d49cea353608143ae24f3ba296d28888057263156ca44a732d30bd1ee183aaf2d343a1880aafef58c7d3cbcf4e4a92d3b2e00adf31429ada5c7e692eb9d5","ssdeep":"","tlshash":"f501d019196ec539803a76f89aaac52ef47810179010c89e788cd5304f71d65cc4acfd","size":790,"data":"","first_seen":"2025-12-27T16:04:42.418542Z","last_seen":"2025-12-27T16:04:42.418542Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-04-19T02:14:26.078034Z","times_seen":85768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"eventHandler","is_inline":false,"md5":"320bcc32736148a3250d36e7bf1c7fea","sha1":"7651e60b3db0a1e8e5829b8421e86d249b44dbc2","sha256":"faf62f9dfa46633ad0bc0da6e2cfc8b82c78db565ad2a8280619965eb296ab38","sha512":"d066c21efc6628174b6c83ff9d7d4a839af78b78db18e66a716105d761b9f6bf9f02074b765ae6eb6930118a4ed229bc4230a10f68a78c6c1cb9817b5a30a8f3","ssdeep":"","tlshash":"878000a80038800a0002c3080023c8e30000a80f0088838cbc0328c2a0b88000802ca2","size":34,"data":"","first_seen":"2023-04-11T12:15:08Z","last_seen":"2026-04-19T02:52:26.890851Z","times_seen":1643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/date.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9256f059d597b6c3fa046e00d457fcd","sha1":"a5d5298fd6737d99e4dd71f9b1f686849f5f87da","sha256":"5de11f7b517d7f89c70ea78a8fe23a2f86bd848c8eb098003623b9faaff42d2e","sha512":"0757aeb4cea229877f10c0bd5b411cc9836fb66242fe99c5e96d4a13737835b180533e1c4693eec7d3718f8dd6a474b023788c38272a4b38a8b17f24a0a81951","ssdeep":"96:JUAuXHhJ376UYX6sfWdJVeAflACAEYB+zq0LfUvsHFH6+PpDQAyiDJpeC78Kf0rq:CAuzYXtANACAEXlc0DQIsKfPcmF","tlshash":"fef10e4274303008237a91fc75ce928a25f06dffe61a415ea451fe8927deb7e1b7b219","size":7901,"data":"","first_seen":"2023-03-07T12:24:05Z","last_seen":"2026-04-18T09:31:25.724622Z","times_seen":1393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#181","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-04-19T02:33:51.98223Z","times_seen":29531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/widget5445.js?id=a2d7690b-7f78-45f6-9c5f-f9da0f3814a9","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"05ddd3eef71e77f24c4bd986f7e0bf2b","sha1":"a8f344dee25867eb93b0b76b5daa843db36afd7c","sha256":"a6390125a1ec380bf29c4f8bda3759c20923493dca5d4ffcd9e99ce11580d1c9","sha512":"e37d502e17661c80ea1f9d37de0010a194df2c690befb2acd484950a08381e177a298174d4b09e6df931a4599c43c2af1974150749e157eee6de66b7f39a61ee","ssdeep":"48:MPDc5JdCmudCDOowUREtdDlvwUB6gShqXVxA/JyuOMfxjhUh5+TML4jBMXEaxc3+:Cc5aXsElGZrWQTML/XEaxcvvFM","tlshash":"0b91dd9b3cb2c164921106cfa1b7eb4cba8150b53160c4f2d5fd888e2de0e5359ea3dd","size":4346,"data":"","first_seen":"2025-09-26T16:05:31.487537Z","last_seen":"2025-12-27T16:04:42.392835Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd9d4d4d431114ada5774b494ec93aeb","sha1":"bd0dd0cb4e4f6195a8648c16051d7c0febd216c9","sha256":"28a2be2bc8bf204122a780e7f0b09f0435656e4a17dc0913e4b0a8c29350fd07","sha512":"5e2dbc53bbaddd83a136ae1941b0218888d69548f5ad72eafed2829f92ce0fb24c2c947fe29dacf85f1e3c9e8ee95eb512285574e0b69a2e35c3ae6f839ec89b","ssdeep":"","tlshash":"c2d0974d2c44a830c36991bb21b8c68234e6003cda26c90bc88dcc0e6b30fc5cc39eb9","size":254,"data":"","first_seen":"2025-12-27T16:04:42.475178Z","last_seen":"2025-12-27T16:04:42.475178Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sitesearch360.com/v14/ss360-unibox-v14.chunk.f4c74eca30d264a93aa3.js","fqdn":"cdn.sitesearch360.com","domain":"sitesearch360.com","tld":"com"},"ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad266c24ac9f5c73548046ed23b1d131","sha1":"69f01f939aef545a9fecebf649d1a534c80e867f","sha256":"ecb9adac3f64c56265e564cf8da2d813bcf55a2f61df15936f4c258cc13c856f","sha512":"345fd881116ae0af5eceea2eb5963a508e8666d73068db142539c7d05cd8ada24093aa27cfc9487b1a3c933dd49356f0b23400b558b20cb5b5e7b6106ea43173","ssdeep":"768:YWjaek1WWN6PhdFKz2oeB3RIMVo5bKiQBABkl5ccq2O/SMvoc6cOczcQDO7O:Faek1WWw0KoeB3RxGdKikxln/i","tlshash":"c34308a0ba203c3930afb52694db26857334755ac90e2db8b93ac0c65ddcec67197f35","size":56842,"data":"","first_seen":"2025-04-08T12:50:13.755595Z","last_seen":"2026-04-18T22:01:51.062784Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-19T02:29:50.577464Z","times_seen":106307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"43fbc5d5129b26d928fbdec6f41825c8","sha1":"e896ba0aea732430915a8bb7f3ca80fc3437fe98","sha256":"f09e86abacb9e962c8abadfca62a586151adc475697640a5114c72c5b06bb401","sha512":"de0830f0fad8cf0cd4711a1de8832bec6129808b8e9c7372b74aa8f6ac65213231e740c3f970f9fb9e31a521371e40d2e3dfecfb84c8475c0bab8fac66c18a3a","ssdeep":"","tlshash":"cba022f20e28820280330082cf00e0a8f280080808232c0cc8ee8b002b000032028a00","size":63,"data":"","first_seen":"2025-11-23T10:22:06.168701Z","last_seen":"2025-12-27T16:04:42.47659Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sitesearch360.com/v14/sitesearch360-v14.min.js","fqdn":"cdn.sitesearch360.com","domain":"sitesearch360.com","tld":"com"},"ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"021e55da7c3c18ad2ad0075756a74437","sha1":"c0cbafc1ffc702466eba506bc7389bdf855d2f6b","sha256":"3662cdd25882ca849ea513c2b0b0b9ec3cb56385761c0c6dfd7d12aa1ec055be","sha512":"961af4534dd3d7984d1464c98883000590be37afe19acbb9c4ab836d36d9be63fdfe87341a6b51d9f7315f68572fe9436499b473e122e20630828f038e3f7f97","ssdeep":"3072:2Ih8Ptz+2QE7iORrP9cUiwg4YZ7A+6T1JFhNYH1g79+Sbe9RiqIQHAL2:2+ory09cUibBZ7AxVk1gJ+se9BHAL2","tlshash":"f7740ad8f16230b112a752e2d06f270972367d38780a9994f57ee4d41cbce8a526bf3d","size":345475,"data":"","first_seen":"2025-08-07T08:34:43.414347Z","last_seen":"2026-04-18T22:01:51.034872Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/drawLines.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7db0502baf867aa0663475b899ffb19e","sha1":"a69f4ef6ab52c62d9885dc55b733c8c37687383e","sha256":"8a3eec9c6525ce4aad8b37e0a188f4716a8fcdec24ee894d2f8ffec447872fbb","sha512":"68964174935137b93491d1bea5e3fec05f068dabd36cf5670bb03c6c4eb30bdfbc493b8002eb8d1e46d7289f9c8430d25d230e1e6870d89fe53cf0f7be78794b","ssdeep":"768:uVYu93uZgDPN6cypp08tc25yBY/BEMXH7YE7cpv:u19MgDl6NppjtDwBY/BEUH7Yecpv","tlshash":"18b208eaf2863475818b63a9143f6749f13368156e06844cf479d8d26d38f8970bfe78","size":24891,"data":"","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.688465Z","times_seen":1391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/html/xingyft/index.html","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"68a98d9e00c5b2e9c5ef03b2f70ffd7e","sha1":"17842dc377d9e77096ab9de1ecc71e4fffaf2200","sha256":"c129618552deadc90624ba69dac929378504f8f5d6a79f900671568ab79d3b07","sha512":"53679db19bc6ff0c688ede02f1c272232629990d93832da5c32bd8ea05750829d284be32b968ba2fa04a0bd5fa83ac75a7fb7b6f6fce62a448c7a63b3b0adfca","ssdeep":"","tlshash":"e5016d19f7dc5b5760bb3250556b86c9142e0c69e504ac40b59f4bd52b9f3bc610fa08","size":753,"data":"","first_seen":"2025-03-06T05:20:52.188346Z","last_seen":"2026-04-18T09:31:25.71213Z","times_seen":1132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/iframe-resizing-child.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71d0102bb2816ec21ed7202c9fccd5c3","sha1":"2a9c78a04f82b1f95b96e54f156fe7cf6c6424e1","sha256":"39afe1a9e598b02eab8d9b2c4985dcec3abb2a4f0e2ed4801459b812280d6891","sha512":"c0434d964c26dc4ca32eeac88e86cdb447fec1b9b0db43151543c330bc9fcbfe4f54720fb51a3698986159d8a3712d773f81d1cf391b1f4416c94bfae552b7fd","ssdeep":"","tlshash":"a5515266e7b05235425f6c9e1a0bd6457233c17fb6427c55bf4d21842fd68eb21303ac","size":2986,"data":"","first_seen":"2025-06-23T20:37:59.236135Z","last_seen":"2026-04-16T19:34:05.626304Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery-3.5.1.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b61aa6e2d68d21b3546b5b418bf0e9c3","sha1":"9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7","sha256":"f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b","sha512":"5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8","tlshash":"3193f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89478,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-04-19T03:05:17.616295Z","times_seen":15176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery.validate.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3578aa2102f92faf3c4bb607cdb276f","sha1":"07694d89bfd65013b63febaf2becddb9553826e4","sha256":"60c0c13aa97b486e15853e09c1fa194fef8d2223279a3bab9e660f3d84341d29","sha512":"7ff61b921ef69d6a707eeab6485ecc946411388d0adb0ad28494e70f0f808427ef20ae8a9b8cc5f850aa7fb34cbb8bf19c891a51f0da47e100922620ce80faf2","ssdeep":"768:f5PAkQNl/jHWgb1v7d+jiE9o2tOmS7/kJyM3bMLSQAZUr2:fik+/DWu1v7d+jiE478JyMTQAC2","tlshash":"9ec2874973e5201a8e8770f1dc8fcd46b1b54a249195a8ac799cd0d099a0dfc86faffc","size":27648,"data":"","first_seen":"2023-10-04T23:35:47Z","last_seen":"2026-04-17T09:12:25.913377Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/summa.project.common.min1137.js?d=20250917","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a765ee968f65ade1e03edf1e6911ab44","sha1":"a6e3954085d7ab2aa8211b26e6dc8fdf6b490172","sha256":"0a845077ae989cc1847e6d27f1bcedf8a7a0437f613f82a3e344a7b5812e7012","sha512":"edede2a2769de6b6286b38013623ce6619241ae1427fec83b0cb45ee23218d4f78fa6a75755430c93c074a432a9bfcb775feea3835b7418eef0f59effe2738b7","ssdeep":"192:UtB3bPW5AcDJTTo6hij9zID/Ao0vfSX5PSizvWBCpzvlmBzvrLTiZSQ0d:Utdbe5/VHDhijZo/X5PSoWIV43r","tlshash":"b592821cf055b1b75abb76aa023f2b0b32373446e9154598b126e8e90fbce4e1707e1d","size":20692,"data":"","first_seen":"2025-12-27T16:04:42.377187Z","last_seen":"2025-12-27T16:04:42.377187Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/popper.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"855075c14fed65779e9226874c12d223","sha1":"eb352e9da7a729ab8dd14f41e8aa3c47d3a9e4de","sha256":"03f5c3670a8445c0af75a1b934be176f6c1cde339fbe76b1062cc51e590bca98","sha512":"7ca3d85a512e71642eced745f71fab314bf33b70ed9250fb93ccf725d3d3dbaa971734fcc73968f66e6112303c7e41b92c0d3db55e0596404bd923aeedf108f1","ssdeep":"384:xnMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOgp:M5sg7X/jD45eSxpOxvKD73i5vTzwL9TE","tlshash":"27a2b3cc3294b06643a791a7a0bf960eb2339875610e9410f199f2e97c30ef9917fd79","size":21262,"data":"","first_seen":"2023-03-07T12:40:49Z","last_seen":"2026-04-17T11:55:03.866897Z","times_seen":688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/swap.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dabdd45a787359e4ae2eb3ba57ee7430","sha1":"671eb3e2ef5a39f7b39053269eec7db43ae0ec8d","sha256":"1253135b02ddb8391ab1428a3efff3e4ebe0aaef0062f9007b9c654e6ff110fd","sha512":"c9f6a8b707c088104a126a046ee78154562cfe1e494bf230387ed0353fa37508cffbd11a7d64d25942c0336400859297e935595cac064ad07ebe02d5a9fea8e4","ssdeep":"1536:zrrKbzCumjTKWQHldIysIuFmZ1rVMT1j4N17Le1x1G111DjQ1+2OWPYm1m1rGv2b:XrKb1mjTKxHlu50y5k1","tlshash":"a0c3d9825e88647a4d6dfb11b03a778e9f7a0462f0a0bcaad7f844e447d3d8d6611d0f","size":127084,"data":"","first_seen":"2025-12-27T16:04:42.41942Z","last_seen":"2025-12-27T16:04:42.41942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/jquery-1.9.1.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ced1955d04ad67f93c642501960172d","sha1":"e346705c96ed71fef43144a893dc26f0d1ff2a81","sha256":"7196db5ce1154dda0f62614999dfd169a0e5fa9db634c12c308f9f9b22cb6f90","sha512":"c5fdcd09f23cbc4adcdc9ae38e7535eab9d10026b2607c21414cbb02258f0eb99bea0c8b53ee69129c62cf086898f4fec46d1a52f1170955b2b4d6ab0c636a47","ssdeep":"1536:g9sFlxCuYQ8kdpjEhDH19D7jXHi7mdG5bakVV6qN6MQDKwTYHUfn06dPGMIcXQWy:JXdURN6G7h8aGtvnx","tlshash":"b69319dd76c5b12247ab307d106f540af236599a280c8450f135e8fafc7898aa177f7e","size":93015,"data":"","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.65981Z","times_seen":1251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/main.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f302a0daffe3bc5adc5823ad93baf448","sha1":"80f116f8599e53cf64783a7edf1b37c0675ff49d","sha256":"4e4474d2244a3a8561ab907a12d9ffd3a9e79ab5786e77f63b17302b88773cba","sha512":"a5c588e928502016527b2d8e6f2efa1d1ff7cec958873fcdff91c46cf40a795524228f1c0225cb8086bb313c49d8c405f9ba3aa559b460d8025d898691cc12fa","ssdeep":"192:ouagaGRel3scAHWCbIzus1AUoJJM629svHFBeNEhLQxLrk4fcDx4xWFWNHyk+D8N:ouagaGRel3scAHWCbIzus1AUoJJM622I","tlshash":"423265fffba6262546e677f3159d7b5714b0b6169c034a07980c489caa39fc2201fe5c","size":11692,"data":"","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.651465Z","times_seen":538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery-ui.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcad1d60cf9cb3bb180a1a8339ed5529","sha1":"e045cf3abc14f3d1489828d51a47dd8fb10db197","sha256":"21cacca8e9eb98f1f32702b4176685f2f941af51ab5bc7cf88ccb5435a1bb080","sha512":"98c64d9b57885b57f687b1bf1c48dc87682dc9b7ffa16caf8e1d2d59a838cfa040cbdd03c4a04902996efbb6dbd87b3a7a5bd63c52cff1fc9b4c799dce5ff6bf","ssdeep":"3072:GkHOJo1g7SV7opRBbDrtnAcKzvFYi/5uLO1aG0qFf/nHOl16j:Ly/K3COVlFHS16j","tlshash":"ec44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253681,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-18T20:49:11.960802Z","times_seen":1521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrmB_KWSlQAE7ZYeg_m4Q2fEerx6A/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfca7566c618715ddc872c4792068c4","sha1":"c9e0e1e5ff15fa615e04792cf9a97ba04de31afc","sha256":"a3f35fd4257fc20da36e4689e22dd89a9e77b2c97bef047a64c5d252c485e150","sha512":"287082c1363cd2cc6899a8227c705d7e71bfef13923180d56967243181b6fc1c0dc115ba8d8da3871b614756b2539cd2880beb1f34d69cad1cac5f1ec3e43501","ssdeep":"3072:xv0JwHWSIiKU4biEIiHNcDD1TC7VS5JdmeZfuz7AKUSOsQ+dWsNsDEp:SpNUTnigvJVsNsDEp","tlshash":"b424e7d9b35270669363f4a6913f000ea13b68a9f9484d6cb28de8e25df4d19017bf7c","size":223012,"data":"","first_seen":"2025-09-10T19:46:21.031861Z","last_seen":"2026-03-20T06:37:00.365078Z","times_seen":1865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/local/pk10/head_xingyft.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"01feddd902eeeca995c7dbab1b9b272f","sha1":"c3359a5210920197b16911c2738f98a16adcb48d","sha256":"1c1b040d34d262f37705c6029a53a1f2aed341ea351c440b98e2d725fdd51881","sha512":"0f77bdfb24a6bd78d9e89f84aa28b1544d25aa3e7512aa47ba0f97d8ae7b92284a1ec5272125ef9e4b406eb58f50381c68ee3d9be0abdc1c2620fc3743504063","ssdeep":"","tlshash":"65e072071c7b2012a487b328881dc186e4a23e88a083adec8e43f980352848a600df2a","size":300,"data":"","first_seen":"2023-03-11T22:11:53Z","last_seen":"2026-04-18T09:31:25.675218Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/html/xingyft/index.html","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4a57bc1d603acf5132d946ac36d0e4f","sha1":"bbea971d4bfc5ea854ed399b4f9cfb6bd37802b3","sha256":"5bf119cff23cef3eb705c3797657a30a6f11e67e7fc39feb2d4e19cb6ab82ce8","sha512":"82668c559a1eca53839c6e2ef1a9b9e7f80c15e4195acf033d466fff7f6be2399b92a6d235c746aa88377373af7213c785e530e3e399e0dd5ad4835a5e98c207","ssdeep":"","tlshash":"bee017c2eacd061f93b53418a86e85cac01eb1323985e8aaf6184fbd46dd338cb81141","size":296,"data":"","first_seen":"2023-03-11T22:11:53Z","last_seen":"2026-04-18T09:31:25.737099Z","times_seen":535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/greensock/TweenMax.min.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"08f1097451bcccbc33adc3df4cb3824e","sha1":"56c3b4058f84f98c4866df3adecaaf8bd4892977","sha256":"6a0f194fbf8a1f52593350b93f82c44c6ad4bede39ceaeba70894e750883a870","sha512":"818a48f470e8cf6166ba8fbf6eb63017fac9961327247515430e9f55a10b23e9b89f3086dff2542b57a099c454d28275cb1057c236c189a66ac2de39126cf061","ssdeep":"1536:vWLyA6STJDB0OOLOtXVUVHs0qhbjd9u3jUQQW4Ih3Ph0EYVCPReBiyg:e+NSTJl0OwCixsLbjd9uzUQJVS9ARjP","tlshash":"87b3f8cb7211605144d721da547f0a437337a9a9b4098a2cf699c5ce3d2ceca22bff76","size":110911,"data":"","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.655959Z","times_seen":540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/visitoridentification.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"67b3d0d49061465a6df9e183a940c474","sha1":"ee9ab13537a531180ed54578ab8c2c3763823f95","sha256":"374e0b777776e5eff11ed8347fee8dd67e7f47932933cb4318b2389a8f6f5ae7","sha512":"bb93bfc080b1a4fe5bf55a0577e5d476bd91426f6b13a764595b006cfab73bda7482a3618d22dd1db9a03ffc7a95035048899a85b313c198545fadbe014ada76","ssdeep":"","tlshash":"6d510c7d280125714fb26bbea326e755bd3211ba1606d251b0f8cc817f74e9904b6dc8","size":2970,"data":"","first_seen":"2024-10-29T10:33:23.097214Z","last_seen":"2026-04-18T07:30:45.574237Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d952f2f9699693331918b03673f0c4ea","sha1":"90bd9486b6d7d0f769c25f8f608598d88e34816d","sha256":"2cea32675534bd474b5d477ff6949f707b41ca8b5b76d51fb1e72a16ecbf5eb7","sha512":"ee410c523f59852f274c6381dea2a8a8afd6c823d65b7e41104b79cc18e7449c964a34d6eadee8128d2f38e88e2993b5b0c3c21c0701715552b27ecb1a38e2a6","ssdeep":"","tlshash":"1dc01205b59e50a1002b662d8b453544e2350193180ea878fe9c0c9cbb4534820e1215","size":171,"data":"","first_seen":"2025-12-27T16:04:42.479571Z","last_seen":"2025-12-27T16:04:42.479571Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"eval","is_inline":false,"md5":"124192d5f535f18d2d30299cde040107","sha1":"de42b97aa42b16bd3acb07e482a79fadac0b9581","sha256":"c5335c59098f1944d5404cebb4cb44d04db5ea12fc1f7a3ee23dd9b315e0de14","sha512":"5e51c98d89e74a4f4170e14b33ccde5311ff51dac7514bf2a0897e1d1e4594cfe9bb729509ce0c56bda5c05a6f2c4f02766eb88f7bfa5025438fbdb8f92fb015","ssdeep":"","tlshash":"16e092f7b2da75a0c91e0040c5936bfcbd7cc01597604e7299263f3923469eb1424e4c","size":420,"data":"","first_seen":"2025-12-18T00:22:10.551701Z","last_seen":"2026-02-07T17:18:33.50223Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"059230c716a0d7f5aeb435d75ce216cf","sha1":"d97893ced1a9565eb91d70be68493f5ea0fc1436","sha256":"9da53ec0b1942021f1ece34055f225f90f54b35977cf54c9db84b62e4019d80c","sha512":"f8cb931d516112912ac0dc1d40adb77ec59acd8bf0ae8601cf34cff2a92947fd47d10847e02ebd53c5d2ad21520766f43f458dcdab0fd011be395f230c3d10fd","ssdeep":"","tlshash":"bac01209b68e50960137672dcf493548f23501c3699eb878bd9c0ddcff4634d32e2266","size":193,"data":"","first_seen":"2025-11-23T10:22:06.151936Z","last_seen":"2025-12-27T16:04:42.481655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sitesearch360.com/v14/ss360-styles-v14.chunk.8afa7fc4ce44fc8d4319.js","fqdn":"cdn.sitesearch360.com","domain":"sitesearch360.com","tld":"com"},"ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"008039357e2aa428f45d365409e24bdb","sha1":"41ec4bd924da92c05ca77f22b2ab475f5ee6234d","sha256":"f845561c9619e20d0514a0fb5bc4b4e12b5edca0460c822ea1f34996084fc7c6","sha512":"deb2a19c1514f17ae40a61c4802a5b278ee7d4c6ef64f84f11ee6d2810eb3c09aaa71b2a854268f76de1a264f318c1674f9d12734c58935041ea341f139fba89","ssdeep":"384:8jXxEUGLmiQ2z3emDySe2O8zA/6yV4q8I1WH3EuepKhiyttjd4:cPGiy0QO887VE1XEMUy/S","tlshash":"494385f127a12629602b43e7f6d3295c312ccc23f76367dbf569a4288d8d3d51b6e428","size":58223,"data":"","first_seen":"2024-09-24T21:52:40Z","last_seen":"2026-04-18T22:01:51.089481Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/iscroll.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3249e269b6bf59a9596ff4dd4908bd74","sha1":"16f804a74f66585bf01bb2217997a2a4ff0c4a23","sha256":"3b294972fe3c686a14d4195e17abc43199da904d959c9ffa128b3649b6bd925c","sha512":"f8fff231edd431cdad0e9426353abceb12ad72e1decfb110aa48f6b81fd061f9b2171bacba515069c1360df4a7cc451c1b0cdce380c4ecdd3849231bb4f07bc1","ssdeep":"384:KgC+EUMfCHqTj54QUX5WSMFqa7BU5TJe3c6OJsBeCWvtk7mSjjxaF:Kl+EUnqTDUX5UFO5TQc6OJsBetO7BlaF","tlshash":"2792a4889112338245ffb399dacb860d607a9339671750cc3929bffa6a447b843d367c","size":19891,"data":"","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.660422Z","times_seen":1392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/index.ecba9def.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ba3d9628beef8e02db17271811dabdc","sha1":"d2aba6b80a0bf575887a2a7cb7742040f61d96b5","sha256":"e234afee70066c056093990fd703dc0ebaf3414d02c2bb335e140443f7a624d9","sha512":"b25d8f807637dced5acb8ad0fb59e23b026dc98fbc838910b5a448462c7ad78d38b7a8ba51c499afe785ffe09a14fe3cf837b6a523e6f0d78deb0936d42e9392","ssdeep":"6144:Rs7FiVY2Vb/c4+WoD1EOz6derOGKs4TvUuYZWrvhjsNuaB4gvhE8Ofnc:Rs7yY2VbQRmgrOdR5F50mc","tlshash":"22d419c976d2b06543a361b1003f240bb37a5d3a780dc490f216e9d5bdb994e927bfac","size":651138,"data":"","first_seen":"2025-09-26T16:05:31.570739Z","last_seen":"2025-12-27T16:04:42.388592Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"31980504a067d7603ef3438242cf7142","sha1":"6fc0a3fffb973c8fc981cbcf86c8cc2ddb0fc1d5","sha256":"3690d470368c29d55e404cf2353d3a4213e19f5d4a492eca92381e3857f41a45","sha512":"297af407d07522a268fc1df95e2432b13107e93b3ba8487c7e171606185108d77da293f615eece52db5df4bc22ed29009edde8e5acd43925a54baf55be89d118","ssdeep":"","tlshash":"a1f097bee891a1585bc335b89bbbda48d0ae0429d01ed803a8d6c4cd2e3cfc8143234c","size":626,"data":"","first_seen":"2025-10-13T10:36:46.88679Z","last_seen":"2026-04-17T07:57:28.094569Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/js.cookie.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd41eaa4940db6f2f6ae5b82a0270f6d","sha1":"a6cc8e069e17bcee2d9f60ea4f92cafb101610d4","sha256":"d3a905ed0b4d87c3a91660ac74cef2b4cb4958d6bec2f719c1de3143fa5094ef","sha512":"3e5d0f3c19522344d9cc7f0276c177100823dba03ed96fffbaae222d8ac163f85f1cbe8a2eef4737080977f26ecc0ed2390f3e47b698cb4608201b9bd9f288bb","ssdeep":"","tlshash":"5631b8ee3095a8da07071450463f1207f2f91e56eddd98802264e4f50bb077a01e7f77","size":1683,"data":"","first_seen":"2023-03-13T19:27:27Z","last_seen":"2026-04-11T13:52:57.323794Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d4c568024f10fff88524e5e92771c65","sha1":"5dd1a75c8d633d8bf98d4cb75c4e02654d7d655e","sha256":"4b715698183112f11a560e1703602233141063d346543b75b65690b6759d6f0f","sha512":"3785313837ff61e563e18f1a1851490c5b0b55ef49b5e0613d462e3899acca365d691a5f24b5ed6d8414c829d0bd69631a55e444dbc2eaee378c02760c1ab0bb","ssdeep":"","tlshash":"d8d01246a58e10968037672d4f853b58a33662d3388ebc74fd9c0ddcff6534d29e2265","size":197,"data":"","first_seen":"2025-11-23T10:22:06.156416Z","last_seen":"2025-12-27T16:04:42.484467Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7df9e6c00716b750f4165724c824b1a","sha1":"3234a921060ba95f0b895acd6a42afe93cf473a3","sha256":"5dcb3c4c0bf298a14d72580b4ce61d9f542ee92b5e826697555d9245c8cad4fa","sha512":"cc37dab95200a2b2550fb06edaf38a58d3cd4b7c87c465e6cbc31e1a24ded37fe10dede41fc936dda9816206750b4c334d53b9a086322ff9869d02c4af4359df","ssdeep":"","tlshash":"0dd0a75ab59e10d2103b225d8f063599e27510d72c8ee478bdac0c98bf4534c51d3266","size":229,"data":"","first_seen":"2025-11-23T10:22:06.164915Z","last_seen":"2025-12-27T16:04:42.485752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/zepto.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bea8158383f3034319b45571f5ca7e8","sha1":"c546d9454a2e62ed987b0ff459a13bc41a51b250","sha256":"bdcd35a7fc89302612325490543bab6f0f74e46830e1a646c0d434c22bd6d476","sha512":"191e508e15bc12a02773dd14bb4767d59e953360c581532d5a330910b9bc089cbed1225c4e941a28aa2a153e9e871e2a85d38fc69fa76a18faa1012899d0e455","ssdeep":"384:/qbM6OHYNwcyn24wmZucAQfSHRZpB3sEfH/CMtYPM:6YYNwLgvbpB3HfaMz","tlshash":"2fc261ccb2c6b46247a771b8506f610bf23b6889380e4454f169e8d5bc7890e957bf7c","size":26273,"data":"","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.528202Z","times_seen":1135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/vendor/modernizr-2.8.3.min.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f07f17f928f730c54ef90974873416f2","sha1":"7d785debb83b3382c8aa18d18551644c6c81f75c","sha256":"3d0ce231c297362c5f0950c76af1d924ac9d2097fb50bcbed34deaa349a0572e","sha512":"9e03790dbbb70860e482163381c04c8f3de3473dcd7be5f05c573e62ec17bfbdaf8859f42d2890bc2aa040f73e298a09893bde08936b39e0b23ed7371845bbf2","ssdeep":"192:XQDGde4xgI2N8oJTsZmgCuuMj3egmDo9eoZ6akEHI3TSsD3SIKz:ADGkuKXJYMgCiLegmoZ6tWI3v6","tlshash":"0f62e6cd7182701a53a7a07b51bf450ef2bb9648881c4944e159c8ecbdb4de8823ff6e","size":14721,"data":"","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.598929Z","times_seen":551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?9449080f1fd9d69519fb3ef29e931160","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c73e21f0583b80b44b5538b9000df5","sha1":"977714121880095fd2478e98bc1afc2c1801c92a","sha256":"e96a047b2ea879a30260f9058dd4a9b395360e370586b2f0df4a7939c56d421f","sha512":"f2e19afaff8a1de37fee7735fcd2d291532220f4e78063713bd82abe1666e5c14ae0814024f29dc03d5737f8df64545451b04209859d16e19ca9a661b30fd8db","ssdeep":"384:voJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:vo4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"7fd2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29898,"data":"","first_seen":"2025-12-27T16:04:42.445462Z","last_seen":"2025-12-27T16:04:42.445462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/iframe-resizing-parent.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1863ce324d1cb0d59b95f3d772caf72","sha1":"4a9da5defd0b12fe41e308f4f9609e935fe7f06d","sha256":"d64adc00e83a3600f31c83eba6275d617f53189c8c47162db5d66fed2fb2b644","sha512":"c6573cf78404ba21379f81cee7de388b02459fa9dc746c3ae61dfa5a23b67fafb8315412ff7641c6b213812df92da5edf503421bb033d6b5c689efa10fbe58d2","ssdeep":"","tlshash":"510190df35350638812a6060258e6a493612d0447743caf678b455107ff4eb375b57bc","size":774,"data":"","first_seen":"2025-06-23T20:37:59.25168Z","last_seen":"2026-04-16T19:34:05.64228Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bd51static.com/21jo.js","fqdn":"bd51static.com","domain":"bd51static.com","tld":"com"},"ip":{"addr":"35.215.189.171","port":443,"asn":15169,"as":"GOOGLE","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"faca0dae2a2ae726125e56ff2541e6d0","sha1":"396c523991e13fc97cc85b9e0dc9d6c81eca62da","sha256":"ff71c5e0a07ab31facf2842c405f1d64b09b87e7e6d768cabe6c276737deb4d7","sha512":"ab3f13dd6dd796602d9b6ac4d5fa6710053b708f84c0c0067d7b926d6c0d6413599268672ecd2dfaefa226a651b110cf2d3b3d8947010d2a463ed4ee5894f20f","ssdeep":"","tlshash":"f621ee9f7c05e2246b96383a33bbdd9ce9ae0025101dd80294eec4ad7d29ff84526b4c","size":1365,"data":"","first_seen":"2025-09-10T11:21:24.605613Z","last_seen":"2026-04-19T03:20:30.90504Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/Widget.896ed53a.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55b63fb05cb362bdb1e1786f6b9d4455","sha1":"d6ebdd2bc92534c6f41e3de8a65b3dd17326961a","sha256":"8fb6b4ef51e191f9b81da62c06cfafdca7fad0e8bb8ccc86fc77f3f2221a17da","sha512":"ded9b61fe41f058c049a8ed4cff24c3483cbf5dfff027c17237e5190d37fa546a0dd161900996c3aeeb3477287a7a5a7e3792ffbf9b9cb3ef30e38051a23fb32","ssdeep":"6144:zNCjs3yaNYkyBYTHw9hnF2X7npgVTaRVzjqODIVq9Jhcn7OQGTwxHihxwOy:Rb8p2zqODITdFOy","tlshash":"aaf429ccb3c1b165939351b0412f010bb1baaa5b380c8458f2a4e9db7d79dd9613bfb9","size":787841,"data":"","first_seen":"2025-09-26T16:05:31.610536Z","last_seen":"2025-12-27T16:04:42.487754Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"091cfb902bc2ae4ef8b8194bc34d5a76","sha1":"b99ff4c6ea0d6813d37827cbfd74689293572391","sha256":"7330004a70381920c402b9cede3866a95bba5bcdefb78ddf83c78c991e1da51f","sha512":"57454f10b490b7c504e0b032792f86fde60770163294a3baa7855dcdaceca07031c7ab1c28a6fbe6c55990edb78788042d97f544227b2998238905e94dd8bed3","ssdeep":"","tlshash":"21f0556a7eb64532823ba22252bfd54c3162200bac00e6493cecc9481f84fe80f09c6a","size":441,"data":"","first_seen":"2025-11-23T10:22:06.166209Z","last_seen":"2025-12-27T16:04:42.489065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"55ddf3b73f8d499d227ce204f6d19544","sha1":"1e3e709f9491e0a4a3404ca4566ef3270a5e53a6","sha256":"7a03118a7c48eccda1c548498d000f5d2b89a59d0e58e1e6678e8b3d10f43a5d","sha512":"bffdd1ab41ce56fe7afc7e55c182cbe0abcd30ecf1eccfa63deb05e7262832cb54308a63967c31b80d65fc6fa2b239cb9329d8fb7528222317fa17997f5336ec","ssdeep":"","tlshash":"e4f097eee841a6586ad635b897abd649d0ae0025d00ec813a4d9c4cd3c38fd8482538c","size":626,"data":"","first_seen":"2025-12-27T16:04:42.490642Z","last_seen":"2025-12-27T16:04:42.490642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/summa.project.summahealth.website.min1137.js?d=20250917","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b73ea09578688d8a0e3e9c3457429f03","sha1":"ce88f3cebbe66a88db4af380e15ff973fab813fa","sha256":"ace207beeae8bdf4cf81583b2946e00d55dd391da42deb826cbd0b29c00c1f19","sha512":"aa0e6a0f0bf3a366dde7656e4e784220b95345400f037c047f12731c37a87e6ef83f0aab5bc43110a9232d298576d4e620a3374b8bc3abc2112716d2bae7d4db","ssdeep":"1536:jEm8PrQiJq0ZwqYNg4r9lPRqi15Mz/cOXz98f:4m8PrQiJq0Zw7Ng4r9lPciLMz/cE98f","tlshash":"c453821cf118b1a723ab36ba652f6a0733737829da0545507165adfa0ebce1c2713f2d","size":63432,"data":"","first_seen":"2025-12-27T16:04:42.411375Z","last_seen":"2025-12-27T16:04:42.411375Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=gMA/d=1/rs=AN8SPfp6pUHKsXNsMEC5QdH3_ke7hKKgIQ/m=el_conf","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"55b9047a0925695ee7511007380dc78b","sha1":"8f87c92c11778f019b822043c820c1f006da3b6d","sha256":"eed74353b63e3d48771f224decb304fcbb4a3199d71a391c89a9f03bc1993457","sha512":"a6b78e485e394dd0ae59eb05d456b0474ad9d91b2ea32682fabcc3028d67e1d805537011d1bd9bd47d3643c29731a912c2b0f9bfc770abc8e5aaa104d74bcdde","ssdeep":"1536:Xx5c4EtzSuSgUARQVzKhDHSFli6DZE7ijlv2sjiPwNWrY:Xby2VzKhzKpRjizY","tlshash":"fc73c7ccb6a671618267f5f5413f000fb23b59a9e8484dacf288d8e16eb5948413bf7d","size":78089,"data":"","first_seen":"2025-12-27T16:04:42.371291Z","last_seen":"2025-12-27T16:04:42.371291Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e3993fac5939d487efa1fceb09446f23","sha1":"61e7f86ab3489481a0a0f631353fb9c79fd21690","sha256":"f74d3b08eb019a27da91dc38555f288c644c6ff190d014ffd881f817fcd59849","sha512":"c2916c74506d082e81d500267ed7b59f7996535e33b72d237e2c72bc17c946cff06a404eec01cee7659d6180f12a4ce172e0be36f7ba909bd77e6b891225e24b","ssdeep":"","tlshash":"1ab0924af4aba7718b87614000215595a2fe4469d6fd8e80b648abb22a11539a9d4088","size":122,"data":"","first_seen":"2024-12-19T13:52:23.753552Z","last_seen":"2026-04-19T02:52:11.43259Z","times_seen":5487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d537a89b56952e5789ef0f9318806cf8","sha1":"13cb355cbf4a44cc69cb23089360f4ecad08c85c","sha256":"235f791a5453b9601480987c1c77179bfbd8abb5989aeaa41f3d4ff1d6fc2abf","sha512":"c5094fbab7e491c4a1e8eb9e6df517a133b3e91dac340394c653fca4f93b7c2bebc8811596180aa8102ea1d6943dc0c9156a0830fca84138b74ea3bc96bec546","ssdeep":"","tlshash":"9ac04c47b571554a0496f109d387448c7168850a453a4e25365d60ca7fb3f9d174d1ac","size":156,"data":"","first_seen":"2025-11-23T10:22:06.167481Z","last_seen":"2025-12-27T16:04:42.49277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4318d60b8e3cd17a12403692fd4162ae","sha1":"3715d8b1e62f579ef6560cf3e907f902c1e266da","sha256":"bbba5856f6a72e43960ffb257a8cdc098261b1afbab3ee6f62d0fac1a125fed6","sha512":"3954024acb20cf4251d89b96681c8c24b9f340b3c572b6be13b8934b181950fc6da449f695cebb1a1067eaaa80e2d35532fdbf6ea4ef8e5b40c313102643f205","ssdeep":"","tlshash":"cae09af7b2da70a0c92e0040c9832bfcbe7cc01547a04db299213f3a23069eb1024a4c","size":401,"data":"","first_seen":"2025-12-18T00:22:10.555629Z","last_seen":"2026-02-07T17:18:33.534699Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"aa28cdaf06999490a71b2f08007c3ec1","sha1":"9690ff597597e5d6910d6e7b12a93d522d3b6217","sha256":"da87f65bc5be08967b365f88bf7d8a49ee6c817938dbf758266b95c600887c15","sha512":"95fe4d2158183d7404ae643b156accbc51df2aff6dd23062834c950c41b633752feea5a9f35357e9d20a72462fd5f77e3e6ceee5683e60590373aee90178bbd2","ssdeep":"","tlshash":"ab51edb2a05ca11b5503d5d2f8923aedf0da0168d7726cd03e2c29efeadac77049712d","size":2874,"data":"","first_seen":"2025-12-27T16:04:42.49474Z","last_seen":"2025-12-27T16:04:42.49474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"953a252bf9a7b7a663200b012155e663","sha1":"cb56157cf729108f171cda4e4ebd706845ed9789","sha256":"bb320727416f5544294ace35fdfd4d6d153584e6732622820639607a10fd2a17","sha512":"b829f449304c305ad7ea60d78d40d30d1b2e1898120d3849418666cb5115bc546554a6f635bc1262cd45f7756e9d51f54d3de378938d11fb90ab721022c3812f","ssdeep":"","tlshash":"91f052ae6c91e5585ad335a89bbbd64cc06e0429101ed803a8d6c4cd2e2cfd8183624c","size":508,"data":"","first_seen":"2024-10-28T10:46:02.890122Z","last_seen":"2026-04-18T09:31:25.737857Z","times_seen":1279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b05132ab7977b406ccacc2017b5a543c","sha1":"66409149c36368301a4955e209317d2404a71ebf","sha256":"3eb4d02439e4b8fab1cb16cc5ab69f335c429c6554c398e9d5753881dc6c432e","sha512":"6fecf98841097676e02e937a55b5124607910c013a81c11537cd8eae462ef26f9e904e63f00518bb9cc021cf2889c644cfd59d39b79a5ad8de0422b233a077dd","ssdeep":"","tlshash":"12f097ee6c41ea586ae635a897abd24dd06e0025500ec813b4d9c4cd3c39fe8482938c","size":508,"data":"","first_seen":"2024-12-02T21:35:22.330823Z","last_seen":"2026-04-19T03:20:30.951983Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/evalx/6370f9ed4a3eff10dc46a2a1/contexts/eyJraW5kIjoidXNlciIsImtleSI6IldJREdFVF9DTElFTlRfS0VZIiwiYW5vbnltb3VzIjp0cnVlfQ","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.1.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:54.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"GET /sdk/evalx/6370f9ed4a3eff10dc46a2a1/contexts/eyJraW5kIjoidXNlciIsImtleSI6IldJREdFVF9DTElFTlRfS0VZIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-LaunchDarkly-User-Agent: JSClient/3.1.0\r\nX-LaunchDarkly-Wrapper: react-client-sdk/3.0.1\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-ld-envid: 6370f9ed4a3eff10dc46a2a1\r\ncache-control: max-age=0\r\netag: W/\"(p:7J61EGFSWP8PNBVJTMKTN3BKHT:813)\"\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: OPTIONS, GET\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, LD-API-Version, X-LaunchDarkly-Tags\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL, cache-hel1410027-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1766851434.033847,VS0,VE6\r\nvary: Authorization, Accept-Encoding\r\nage: 0\r\ncontent-length: 431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2094,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2aeaaa0f5078a98fd7d39edc619fa47e","sha1":"1ad3e58c310260b3d8ad3894e94b392bf24570ac","sha256":"5d6eadb08a50e6fb6ad3b983c2a45113bed3265c83b22b5eda94b5da25d8b0b6","sha512":"e92804c679837dba6321f9a0f73ceb03e88ef047cae29cb2efab6355d70b303857ac0febf287f5757e5c54e46b030f9609d4299f6c553739e46e724ffd220808","ssdeep":"","tlshash":"9841d28ea06b58fb911703659e6a7842a37c52ed3c0622c8fbd5065d3be15fe0357893","first_seen":"2025-12-27T16:04:42.358856Z","last_seen":"2025-12-27T16:04:42.358856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getPksHistoryList.do?date=\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:04:01.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getPksHistoryList.do?date=\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:04:02 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30947,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (30915), with no line terminators","md5":"ff829336551cfd1f5c2a45f29a1cdd8b","sha1":"d9998f42225298781f3017d6180e1854d9280c73","sha256":"c918117d6c3a4b97ca5e0ed12a016bdf44e9e91b659cbe88ff9a065a668b3afb","sha512":"fd29f4ab26deca54bd02911e2a5a0be5518884c1836e074eb433b622bc874353417828109c6e50baf6461abbe244bbef6d971383538dde9835b2bc9a9d7daae2","ssdeep":"192:nNgsPcEThZ2mvTCOusI9k79OsvVhtaPIbENt:NrckhZVbTu5s4sthtqIAn","tlshash":"00d22606a96d3a53362c3875a4bef5f6a1b08f030d9c1b1696fecb30548bd17369eb05","first_seen":"2025-12-27T16:04:42.360082Z","last_seen":"2025-12-27T16:04:42.360082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/svg/sh-logo.svg","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /svg/sh-logo.svg HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 31 Mar 2025 14:47:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaab0b-fee\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4078,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"554e3bed6e0129cd1e5cce434a2e6bf2","sha1":"52f1a588fdaef16fa615255df63456b1b470d132","sha256":"35902dc71f3fad3cdbad672d795717f350e8ffc2a6cbfc9e00b67426188494cc","sha512":"a55b0a00110d5fa166483ed5a566866568596a7ce08f329a4847105d671919995445050b520b15519adc4d21857c3365dd3d71d46b6e05283ed09d72801c7ec4","ssdeep":"","tlshash":"e681f01703518bdeaef905aca939284532d1dccbb474e1e0bf5f5027e14c4e0b65c7aa","first_seen":"2025-11-23T10:22:06.113563Z","last_seen":"2025-12-27T16:04:42.361156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallbackef50-4.jpg?la=en\u0026h=600\u0026w=800\u0026hash=6BA1C4BF19A6ED706643E38D119032BE","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallbackef50-4.jpg?la=en\u0026h=600\u0026w=800\u0026hash=6BA1C4BF19A6ED706643E38D119032BE HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78d1-7aa6\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31398,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x600, components 3","md5":"41c4815cf91224b659ca00b6a0b93c0e","sha1":"74752d3c56536d78aab842ef9c643f340814f993","sha256":"d9b32451062d94d66109c416095748d0f23c09638ce9faa03820f04e58b0757c","sha512":"25be2780d3f96661b214f95d496bcec868106e20bf230161a1c1badfc8ef219d7d85a3619f91cc1906fa88b0abf3af69b81bc366c4024f15d38529848c72cf6d","ssdeep":"768:ZRRqOIuPWzzIDvzMwqqXSgi+q5xuZ56X7psqTjLg:3RIu2zIXRqwNEx06XSqT4","tlshash":"cfe2e007e29b48a7c1bc017be626488ecd22bb5c66dec74e81f723e071ad51274b8911","first_seen":"2025-12-27T16:04:42.362336Z","last_seen":"2025-12-27T16:04:42.362336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery-3.5.1.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab8-15d86\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89478,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"b61aa6e2d68d21b3546b5b418bf0e9c3","sha1":"9c1398f0de4c869dacb1c9ab1a8cc327f5421ff7","sha256":"f36844906ad2309877aae3121b87fb15b9e09803cb4c333adc7e1e35ac92e14b","sha512":"5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b","ssdeep":"1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8","tlshash":"3193f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-04-19T03:05:17.616295Z","times_seen":15176,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"insights.sitesearch360.com/insights/session?version=14.1","fqdn":"insights.sitesearch360.com","domain":"sitesearch360.com","tld":"com"},"ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitesearch360.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 22:17:45 GMT","end":"Wed, 28 Jan 2026 23:17:34 GMT"},"fingerprint":{"sha1":"3B:33:1D:B7:B0:D0:CB:19:43:9F:E0:7A:CF:65:84:8E:1D:82:DB:0E","sha256":"D0:07:30:A8:43:32:2E:70:A1:B3:B4:CC:50:48:E1:C7:B9:A4:07:A9:72:DA:4D:E0:22:D2:C7:51:A4:8A:61:3A"}}},"request":{"raw":"POST /insights/session?version=14.1 HTTP/1.1\r\nHost: insights.sitesearch360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 151\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":151,"data":"siteId=www.summahealth.org\u0026sessionId=7d134884-e1e9-99ba-09fc-e2281e8056e5\u0026timestamp=1766851431154\u0026isPersistent=true\u0026referrer=https://www.pacetonet.com/"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncf-ray: 9b4a0ce4f811b1b8-OSL\r\nallow-control-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\nallow-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/logo.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/logo.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-2bc6\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 57, 8-bit/color RGBA, non-interlaced","md5":"c071173fecfd9337ce1ec231531f3b52","sha1":"c8db29356d4e443e6a126f394634a3f3b70454cc","sha256":"eaf36b64d67ec9ea1431dce41801182b0aca5c93bb8fd123c64d3c34ffafcf76","sha512":"cd22bc62b92be3a466a47ad88b227eabd15151f70ddf5cdca76a5fb2ade531786f49acabffb00be752d158e63dfc2dc538471781662b3d6674911b5014f5a4aa","ssdeep":"192:IEK0Vuzx7vhAiBeeG/9O6Td4nCcaJBIiS8Si9wlAtiH1iT0Q:2l7miBxYO8d4cBIiSXHl+iVk","tlshash":"4e32c03335b3e7c0bd596182751ea737a949717f2c821c02f1ac8ca51b63a51b404cbd","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.675925Z","times_seen":536,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/greensock/TweenMax.min.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/js/greensock/TweenMax.min.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456caa-1b13f\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110911,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"08f1097451bcccbc33adc3df4cb3824e","sha1":"56c3b4058f84f98c4866df3adecaaf8bd4892977","sha256":"6a0f194fbf8a1f52593350b93f82c44c6ad4bede39ceaeba70894e750883a870","sha512":"818a48f470e8cf6166ba8fbf6eb63017fac9961327247515430e9f55a10b23e9b89f3086dff2542b57a099c454d28275cb1057c236c189a66ac2de39126cf061","ssdeep":"1536:vWLyA6STJDB0OOLOtXVUVHs0qhbjd9u3jUQQW4Ih3Ph0EYVCPReBiyg:e+NSTJl0OwCixsLbjd9uzUQJVS9ARjP","tlshash":"87b3f8cb7211605144d721da547f0a437337a9a9b4098a2cf699c5ce3d2ceca22bff76","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.655959Z","times_seen":540,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/visitoridentification.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/visitoridentification.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 01 Apr 2024 16:05:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660adb58-b9d\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2973,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"67b3d0d49061465a6df9e183a940c474","sha1":"ee9ab13537a531180ed54578ab8c2c3763823f95","sha256":"374e0b777776e5eff11ed8347fee8dd67e7f47932933cb4318b2389a8f6f5ae7","sha512":"bb93bfc080b1a4fe5bf55a0577e5d476bd91426f6b13a764595b006cfab73bda7482a3618d22dd1db9a03ffc7a95035048899a85b313c198545fadbe014ada76","ssdeep":"","tlshash":"6d510c7d280125714fb26bbea326e755bd3211ba1606d251b0f8cc817f74e9904b6dc8","first_seen":"2024-10-29T10:33:23.097214Z","last_seen":"2026-04-18T07:30:45.574237Z","times_seen":290,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery.unobtrusive-ajax.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/jquery.unobtrusive-ajax.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab8-1178\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4472,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3494), with CRLF line terminators","md5":"c6ff7a89ec6dc89eaafd9ad8155270fa","sha1":"e8e04677ac1f0ed65a68cdb6a25dc82f10f060bb","sha256":"09cfe1ee6bc855f6248c875274faeb56245ee2ee942ec1a21346e384e14b6ca0","sha512":"b02e77916884e26e0a24a13c345236fe6e7fef0ccd3fba1ee706ff951c37366f4e8e494d697b70a805229c5a1c363b2f919e49bc6d500bf618a5d412e40615e8","ssdeep":"96:T3AxGX2TXHcWHP4/ZxFlxzx4xRxqxhoxuox/xGVUx4x3rxTRx4wMfD809J4mkNzs:T3AxPqLJ+n8voEolYUixrtR2ZfDB9J48","tlshash":"c49198aab2803677ab53b1f5dc0f5c02b25573a8528348240d4ec0686c3dd7c9ffb9a9","first_seen":"2023-09-20T09:31:38Z","last_seen":"2026-02-27T13:57:58.592778Z","times_seen":11,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/popper.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/popper.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab6-530e\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21262,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21084), with CRLF line terminators","md5":"855075c14fed65779e9226874c12d223","sha1":"eb352e9da7a729ab8dd14f41e8aa3c47d3a9e4de","sha256":"03f5c3670a8445c0af75a1b934be176f6c1cde339fbe76b1062cc51e590bca98","sha512":"7ca3d85a512e71642eced745f71fab314bf33b70ed9250fb93ccf725d3d3dbaa971734fcc73968f66e6112303c7e41b92c0d3db55e0596404bd923aeedf108f1","ssdeep":"384:xnMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOgp:M5sg7X/jD45eSxpOxvKD73i5vTzwL9TE","tlshash":"27a2b3cc3294b06643a791a7a0bf960eb2339875610e9410f199f2e97c30ef9917fd79","first_seen":"2023-03-07T12:40:49Z","last_seen":"2026-04-17T11:55:03.866897Z","times_seen":688,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/date.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/date.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca8-1edd\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7873), with no line terminators","md5":"d372d65bf3cac7dd5c8e01e537c1f3f5","sha1":"20d5f82e581928efd22c6422bc0fb6d30f30a4b0","sha256":"e9768904049bc1ebda895c104e828ca51fdfd0ba507c6af453738bd359580b12","sha512":"d3a60553c0d9854a973c563033bebf0c4ceb92699e3aac25b664195b66350089d20524a952c316f7faad5d2eba8dbc05d12bf0a9684bb2fbc3e34f29c09f8d24","ssdeep":"96:JUAuXHhJ376UYX6sfWdJVeAflACAEYB+zq0LfUvsHFH6+PpDQAyiDJpeC78Rf0rq:CAuzYXtANACAEXlc0DQIsRfPcmF","tlshash":"a6f11f4270303048237a91fc74ce928a25f06dffd61a415ea451fa8927deb7e2b7b219","first_seen":"2025-04-07T08:33:42.67714Z","last_seen":"2026-04-18T09:31:25.579884Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/result1.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/result1.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-527b\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 226 x 177, 8-bit/color RGBA, non-interlaced","md5":"92e6a8782f7268649ac8050395ee2257","sha1":"de569af4ff700807bb02ea0cbbc121bf7ec38f39","sha256":"fde7591dee9b601fee928de1cc4c7b84a0c4f215c13bb57de7d5dd7099f25b6b","sha512":"33b4247493b86b5b4f179c3a89c295cf374d89fd5ddb94f48629526bdf6c77e52d168802fb635f179dc28dca310651a4862e05bbfd60091db51f96bd818f956f","ssdeep":"384:z87SF326WcuY5DJHivyp6gFW3r4GEVLD2MYYsTxVYyCvFqXk9N2rlyVpp8/6vz:g7SFhuYv7Kr4vVH2OsrYJtq09N2raUyr","tlshash":"2892e049233499b7f314350ea66012fe585da10e52c1ee19bcadbc603fa70f6426cbda","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.460531Z","times_seen":533,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250915","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:52.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"47:99:FB:97:02:C2:03:A6:B6:60:07:03:D3:B7:37:4B:99:D1:7F:1F","sha256":"01:72:D6:C3:FA:E5:7E:F5:EF:15:83:1F:EE:A5:BF:37:4C:78:02:B4:CD:BF:8D:EF:62:9F:53:B1:B3:1A:B6:EB"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20250915 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-JMQWPp5xCktlLho9Qwascw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmLw1pBiEOLheNF24BSbwIvLXb2MSkpJ-YXxJUWJecU5iSWpxalFZalF8UYGRqaGRoamegYW8QUGACItEsU\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=30.SE=ObzWvJLH145GiNTMIGxUoCbQngERRDh10dIznsDy8zhXz0RQN1TJZqlcMq3kaKvqqNuNOlao3lgplImIds15NpxGeo2kVwMdoRbyzBvyW8y2xiv4PG46g-UKzPuz-gQo47jz7OJqjVtpDKA5QFuCfDOO_rAbDNQK-2rd4Eqn-__HXNoSruJEIRREgQnTPB4aI7Md6Gin7Lw5UMueD6BuV6bfjan7qoAe6sqHbig0qo5NPTTby--W; expires=Wed, 27-Jan-2027 08:22:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":78,"dns":0,"connect":20,"send":0,"wait":36,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/sound/kaisound.mp3","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/sound/kaisound.mp3 HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 78576\r\nlast-modified: Sat, 15 Feb 2025 15:38:14 GMT\r\netag: \"67b0b4e6-132f0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-78575/78576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78576,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"2e5b2db2c8372642321208f8014c4a25","sha1":"51e2ab7639f3953c95003c043ab67a82288bb8b4","sha256":"834656b4bc9f3545050d06d7c5bbbc96b4c468787142c3c05fc1b15834df630b","sha512":"31c784f9eb9af1834cc00faf41f8ec49042f5f75e3a0d77008df5277b53f47ea94ddb952e5473abb969a4b349558e218c089114cb2bd68b88be0108a41da3639","ssdeep":"1536:m7u/aBUoC5TWN64322JED/A4oS155+Frz3sOSMkK/uyhW:m7u8C5apm+XZS152Apd","tlshash":"3973026704eeb846bc66d392bed1b994c290cf34585aff603910f76883b7955a306f70","first_seen":"2023-06-09T21:23:04Z","last_seen":"2026-04-18T09:31:25.682594Z","times_seen":462,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/fonts/fonts.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/fonts/fonts.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 534\r\nlast-modified: Sat, 15 Feb 2025 15:38:10 GMT\r\netag: \"67b0b4e2-216\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9635d2f5d626fbb34d60537c88956dc0","sha1":"9ba4499ba2ee56ec22858134c125099c39346576","sha256":"16d2fc39439d11522fe72d4a3b461f2ea49b0bd9e1587cc2fb54e078215c1882","sha512":"3b567e1abc6bf2bb175668df77fe1960133c6645e7d1c9ddbb472d9c5d79f1d7841c94576267c5b91d38acd7d8b6118eecdd12167bb41fe40386a7c0c0ce9329","ssdeep":"","tlshash":"dff02b81dd67f413131c54249bcf4f6b9db97c80182cfa2b5dc82425eee1408816d7cd","first_seen":"2023-05-20T19:29:41Z","last_seen":"2026-04-18T09:31:25.589572Z","times_seen":521,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/vendor/modernizr-2.8.3.min.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/js/vendor/modernizr-2.8.3.min.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456caa-3981\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14721), with no line terminators","md5":"f07f17f928f730c54ef90974873416f2","sha1":"7d785debb83b3382c8aa18d18551644c6c81f75c","sha256":"3d0ce231c297362c5f0950c76af1d924ac9d2097fb50bcbed34deaa349a0572e","sha512":"9e03790dbbb70860e482163381c04c8f3de3473dcd7be5f05c573e62ec17bfbdaf8859f42d2890bc2aa040f73e298a09893bde08936b39e0b23ed7371845bbf2","ssdeep":"192:XQDGde4xgI2N8oJTsZmgCuuMj3egmDo9eoZ6akEHI3TSsD3SIKz:ADGkuKXJYMgCiLegmoZ6tWI3v6","tlshash":"0f62e6cd7182701a53a7a07b51bf450ef2bb9648881c4944e159c8ecbdb4de8823ff6e","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.598929Z","times_seen":551,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car3.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car3.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-60c5\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 42, 8-bit/color RGBA, non-interlaced","md5":"4cd982d3db2207541092ecb5885960c2","sha1":"61a13eefe61b335a2c47c9d4803263bfb8535369","sha256":"32e3ad6177dda5042678fe4147766cc59d10f5370c11159b729d92c88773c84c","sha512":"9b4e8bf46e125edd10bac5ad5feba63343b26ea4a36038ee543a7d06948cf89ae64fc3c2fd716d5031615fac30acf7f3db5f9fb8cc0768a06dbe1ac52df24b64","ssdeep":"192:AShkt65BVv2lNLi/cyKBmiXjerVPok8Ow0I9cNjSVCo5rlNwggWZvNV8bArteON:n6t65BV+lNLYU8iXjIok8N5BR5NVxN","tlshash":"f6b29f5438b174a0c75450736aec3745bca3a3038b808d43b9ee89676f14be94f1b6e2","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.680939Z","times_seen":537,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Sep 2025 09:00:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78bd-13109\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78089,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1801)","md5":"55b9047a0925695ee7511007380dc78b","sha1":"8f87c92c11778f019b822043c820c1f006da3b6d","sha256":"eed74353b63e3d48771f224decb304fcbb4a3199d71a391c89a9f03bc1993457","sha512":"a6b78e485e394dd0ae59eb05d456b0474ad9d91b2ea32682fabcc3028d67e1d805537011d1bd9bd47d3643c29731a912c2b0f9bfc770abc8e5aaa104d74bcdde","ssdeep":"1536:Xx5c4EtzSuSgUARQVzKhDHSFli6DZE7ijlv2sjiPwNWrY:Xby2VzKhzKpRjizY","tlshash":"fc73c7ccb6a671618267f5f5413f000fb23b59a9e8484dacf288d8e16eb5948413bf7d","first_seen":"2025-12-27T16:04:42.371291Z","last_seen":"2025-12-27T16:04:42.371291Z","times_seen":1,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallbackef50-6.jpg?la=en\u0026h=600\u0026w=800\u0026hash=E38A4AE3DD1FEE9327DB8188D587C5FE","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallbackef50-6.jpg?la=en\u0026h=600\u0026w=800\u0026hash=E38A4AE3DD1FEE9327DB8188D587C5FE HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:01:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78d3-86aa\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x600, components 3","md5":"7a82ec1263ec8fc79b271e2e09ca6ae1","sha1":"6c22187597cae4ac5dd6e2d2b6db24836afbd6a9","sha256":"f7fda5da033e379d272d610e38b5497764cab49b5319498d2baa172d33505ca6","sha512":"a7b0c57e6af0c1e3b7a1e466482d1bcaeb458ac842e4205cf37e29dc6dd65368d7e33c294fe9131da880f96e66abd9696d904f159f3381a35220c6020a9c3650","ssdeep":"768:RvCKhxKLV7VgQmbwvxr7OyeGRNCdo2SYm4GYC+0ORTK:RvCoxeV7Vghb4xPO4CdaYm4GSjpK","tlshash":"2ff2f1bf08a7831985dccc27c2a49b3e9e0455a986aee96bf480001235b78e60f85c66","first_seen":"2025-12-27T16:04:42.372964Z","last_seen":"2025-12-27T16:04:42.372964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/img/cltj_img/icon-168index.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/img/cltj_img/icon-168index.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/css/pk10_Gary.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:37:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4d2-7031\"\r\nexpires: Mon, 26 Jan 2026 16:03:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 213, 8-bit/color RGBA, non-interlaced","md5":"9cadfe91f4676d8abaefd706fd002c70","sha1":"3c1f5c663282388d8fa739baf8dd77edcb5a82d0","sha256":"cba1227e78513169698e2b0cf72cd24505429292ecdcb849a8f8f33b9ae5e1d9","sha512":"84ac82a47f8550b13d6d4b804928489423f851c241810d19d268f983e8a5bdf0e98c4e43ca8bddd1ec7494cb34a3374cd3842d8c45a4153ebf4cc30536c52f70","ssdeep":"384:kT4cIpHlIlqQKlgSTxqtWplA+8ixwj08iZpaffwUeyAZ1+Cr444r+RRRkLHX42PT:kT4BYSV3qnc8ffwTB04DJq3LQdt2BI2","tlshash":"ccd2d0dfdc38c182e675ac713aafbf2aa029c2a194d19c0f94e2900c4d96c099dd57e6","first_seen":"2023-05-02T12:59:34Z","last_seen":"2026-04-18T09:31:25.693559Z","times_seen":1386,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getPksHistoryList.do?date=\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:52.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getPksHistoryList.do?date=\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30714,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (30682), with no line terminators","md5":"d87994a712363658f1debda10a99223d","sha1":"13640e088e52b207459b1e04bc36e21d1ac32f66","sha256":"6aa43b6ae09d111f1b5dcc7252ba41ba83006f4e5359a4b8e8fe895cfb3f3031","sha512":"756eb89740fb67c4a2a83b33dd7894ebb56651b663409910c491c25fce2815ec72451dd9cb488deb88afdd1d0a1adbc53d6f97378f7b0e0bfcc714736d3b7b7a","ssdeep":"192:7NgsPcEThZ2mvTCOusI9k79OsvVhtaPIbENt:xrckhZVbTu5s4sthtqIAn","tlshash":"e5d22606a96d3a53362c3875a4bef5f6a1b08f030d9c1b1696fecb30548bd17369eb05","first_seen":"2025-12-27T16:04:42.375215Z","last_seen":"2025-12-27T16:04:42.375215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2122,"timings":{"blocked":895,"dns":247,"connect":214,"send":0,"wait":330,"receive":0,"ssl":433},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/css/main.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/css/main.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Feb 2025 15:38:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e2-c0a\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b0426c64c133821e54647acf29078100","sha1":"35077288b5f0758d73d129a80011ce8590db4a9b","sha256":"aa462d082de55eec1c4b9dc119656a16efd5f0bbae62f491080bccd41801d866","sha512":"f6a22596d9f14cd50de0622cd7130284ec59624d6433a5d8a3d770e05d735f958998e5ffadb024f038cc7e7bdec69781eb05aad30a55059a2c2e2d0a8950add5","ssdeep":"","tlshash":"f551e1a1d9b31984241b92787fbfe229326aa11bcb0fdc65bf4c62148f0671550b2f9d","first_seen":"2025-05-25T12:44:27.135925Z","last_seen":"2026-04-18T09:31:25.580557Z","times_seen":500,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.launchdarkly.com/events/diagnostic/6370f9ed4a3eff10dc46a2a1","fqdn":"events.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"54.84.123.42","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:53.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"events.launchdarkly.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:6F:FC:0B:EB:77:6F:8B:28:FF:8B:49:75:83:70:F1:2D:80:D3:0B","sha256":"FD:3D:7C:D5:80:BC:D1:5E:D9:2A:AF:11:E1:E6:C0:CF:07:1A:43:95:45:22:1B:6F:FE:67:A6:3E:99:43:A7:41"}}},"request":{"raw":"OPTIONS /events/diagnostic/6370f9ed4a3eff10dc46a2a1 HTTP/1.1\r\nHost: events.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-launchdarkly-user-agent,x-launchdarkly-wrapper\r\nReferer: https://www.pacetonet.com/\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccess-control-max-age: 300\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":318,"dns":27,"connect":93,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/main.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 15 Dec 2025 00:40:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693f5911-4cb\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (472), with CRLF line terminators","md5":"c505ad579f07670dbed2a2e488addc35","sha1":"fb73abef2324577491741da70016ac998615b44e","sha256":"da0211c696afb1cbe381142935b276379b2f7c7023a529a6424cd07e421a6ebb","sha512":"9bdde49f4f4f35ddc7f2fef5fbf92b85a30fce2d52f50d74427eff5e081f6087def02110a35f3c000e9049421ce0eb35c370f2ab6e8c6c9cc6e54eda35315804","ssdeep":"","tlshash":"8d21afaf5a8531b0d57b2390caa657bcfe7a801747111cb07c1c7b224b79c930426eec","first_seen":"2025-12-18T00:22:10.527155Z","last_seen":"2026-02-07T17:18:33.470938Z","times_seen":28,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/summa.project.common.min1137.js?d=20250917","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/summa.project.common.min1137.js?d=20250917 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Aug 2025 12:11:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a85e5f-50d4\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20692,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20638)","md5":"a765ee968f65ade1e03edf1e6911ab44","sha1":"a6e3954085d7ab2aa8211b26e6dc8fdf6b490172","sha256":"0a845077ae989cc1847e6d27f1bcedf8a7a0437f613f82a3e344a7b5812e7012","sha512":"edede2a2769de6b6286b38013623ce6619241ae1427fec83b0cb45ee23218d4f78fa6a75755430c93c074a432a9bfcb775feea3835b7418eef0f59effe2738b7","ssdeep":"192:UtB3bPW5AcDJTTo6hij9zID/Ao0vfSX5PSizvWBCpzvlmBzvrLTiZSQ0d:Utdbe5/VHDhijZo/X5PSoWIV43r","tlshash":"b592821cf055b1b75abb76aa023f2b0b32373446e9154598b126e8e90fbce4e1707e1d","first_seen":"2025-12-27T16:04:42.377187Z","last_seen":"2025-12-27T16:04:42.377187Z","times_seen":1,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/p777b.css?s=1\u0026amp;k=hav4bvx\u0026amp;ht=tk\u0026amp;f=1980.1981.1982.1983.1984.8541.8542.8543.8544.8545.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012\u0026amp;a=86744542\u0026amp;app=typekit\u0026amp;e=css","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/p777b.css?s=1\u0026amp;k=hav4bvx\u0026amp;ht=tk\u0026amp;f=1980.1981.1982.1983.1984.8541.8542.8543.8544.8545.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012\u0026amp;a=86744542\u0026amp;app=typekit\u0026amp;e=css HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/css/hav4bvx.css\r\nCookie: calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.pacetonet.com%2F\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Fri, 13 Jun 2025 02:11:31 GMT\r\netag: \"684b88d3-5\"\r\nexpires: Sun, 28 Dec 2025 04:03:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83d24d4b43cc7eef2b61e66c95f3d158","sha1":"f0cafc285ee23bb6c28c5166f305493c4331c84d","sha256":"1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb","sha512":"e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6","ssdeep":"","tlshash":"e630000000000000000000000000000000000c00000000000000000000000000000000","first_seen":"2023-03-12T07:28:04Z","last_seen":"2026-04-19T02:40:38.93109Z","times_seen":128245,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car8.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car8.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-7277\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29303,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 54, 8-bit/color RGBA, non-interlaced","md5":"403fc0a40719a53c28852edc131b3b88","sha1":"1ac90ba5b5728850f4001ad6f23d96c5a6ae34fb","sha256":"1bb5ad1db05de2c87836fe4c184d1783c2784f5514eeacf0c1db9ff9c46de161","sha512":"84cdfb4d930d5be2a975ac223a73996a177ae1b57f5d2411ec5b6885c1b22d4fd9fc6be98c3c4ed4cea9d196f5272f9547da41dedabe22c6ce31e391c729761f","ssdeep":"384:e6te5BeXcXGpkWREekBHrqSBa0yreFPkjIEUVqVejCS:xt+BVHrqSBa0yruEUVqzS","tlshash":"86d2c034ac72b865a49d50311ffb19289c3a4607f4459c46fe8d2d5baf22f82cc279c2","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.600045Z","times_seen":536,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/sound/running.mp3","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/sound/running.mp3 HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 91578\r\nlast-modified: Sat, 15 Feb 2025 15:38:14 GMT\r\netag: \"67b0b4e6-165ba\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-91577/91578\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90112,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains:\n- MPEG ADTS, layer III, v2,  64 kbps, 24 kHz, Stereo","md5":"3bbcdb0aca3b09224ce5d47d45150396","sha1":"aeb52dd2e14c2d3fe70191afd0822e89c2a8267e","sha256":"0f9defd13ef9c8ffd509ad5891ab1e982822d81a19f3bd4f7151c8972e4f0b6f","sha512":"856ac10de88bbf6e0d6e544c64d3d6d4662f4a3173759cd49a8a673d35a82b544d488318f1bfe9a8d83afe51dab6b85f36e5228893348381698098bdd6a1ceda","ssdeep":"1536:OuzczmdpO9a0yJahX73aWiFs++ewvOLz7T7BoRfVXiuYp2OuP0L:RgzYpO99yWr3riFOeNLz7T7KVJiuiL","tlshash":"5b9312219e49f0b185ef1b91a7b166f89c430e11d1348c3e7a5ac1f0a376ae23b52f64","first_seen":"2025-06-13T05:39:28.423626Z","last_seen":"2026-02-22T09:37:48.684918Z","times_seen":25,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.launchdarkly.com/events/diagnostic/6370f9ed4a3eff10dc46a2a1","fqdn":"events.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"54.84.123.42","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:54.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"events.launchdarkly.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:6F:FC:0B:EB:77:6F:8B:28:FF:8B:49:75:83:70:F1:2D:80:D3:0B","sha256":"FD:3D:7C:D5:80:BC:D1:5E:D9:2A:AF:11:E1:E6:C0:CF:07:1A:43:95:45:22:1B:6F:FE:67:A6:3E:99:43:A7:41"}}},"request":{"raw":"POST /events/diagnostic/6370f9ed4a3eff10dc46a2a1 HTTP/1.1\r\nHost: events.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-LaunchDarkly-User-Agent: JSClient/3.1.0\r\nX-LaunchDarkly-Wrapper: react-client-sdk/3.0.1\r\nContent-Length: 736\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":736,"data":"{\"kind\":\"diagnostic-combined\",\"id\":{\"diagnosticId\":\"a4677840-e33d-11f0-8c2b-b927ca2c018a\",\"sdkKeySuffix\":\"46a2a1\"},\"creationDate\":1766851433930,\"dataSinceDate\":1766851433924,\"droppedEvents\":0,\"eventsInLastBatch\":0,\"streamInits\":[],\"sdk\":{\"name\":\"js-client-sdk\",\"version\":\"3.1.0\",\"wrapperName\":\"react-client-sdk\",\"wrapperVersion\":\"3.0.1\"},\"configuration\":{\"customBaseURI\":false,\"customStreamURI\":false,\"customEventsURI\":false,\"eventsCapacity\":100,\"eventsFlushIntervalMillis\":2000,\"reconnectTimeMillis\":1000,\"streamingDisabled\":true,\"allAttributesPrivate\":false,\"diagnosticRecordingIntervalMillis\":900000,\"usingSecureMode\":false,\"bootstrapMode\":false,\"fetchGoalsDisabled\":false,\"sendEventsOnlyForVariation\":true},\"platform\":{\"name\":\"JS\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccess-control-max-age: 300\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sitesearch360.com/v14/ss360-unibox-v14.chunk.f4c74eca30d264a93aa3.js","fqdn":"cdn.sitesearch360.com","domain":"sitesearch360.com","tld":"com"},"ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitesearch360.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 22:17:45 GMT","end":"Wed, 28 Jan 2026 23:17:34 GMT"},"fingerprint":{"sha1":"3B:33:1D:B7:B0:D0:CB:19:43:9F:E0:7A:CF:65:84:8E:1D:82:DB:0E","sha256":"D0:07:30:A8:43:32:2E:70:A1:B3:B4:CC:50:48:E1:C7:B9:A4:07:A9:72:DA:4D:E0:22:D2:C7:51:A4:8A:61:3A"}}},"request":{"raw":"GET /v14/ss360-unibox-v14.chunk.f4c74eca30d264a93aa3.js HTTP/1.1\r\nHost: cdn.sitesearch360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 15254\r\ncf-ray: 9b4a0ce4e802b1b8-OSL\r\nlast-modified: Wed, 06 Aug 2025 12:55:45 GMT\r\netag: \"de0a-63bb1dbf274e8-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nexpires: Sun, 27 Dec 2026 16:03:51 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56842,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56770)","md5":"ad266c24ac9f5c73548046ed23b1d131","sha1":"69f01f939aef545a9fecebf649d1a534c80e867f","sha256":"ecb9adac3f64c56265e564cf8da2d813bcf55a2f61df15936f4c258cc13c856f","sha512":"345fd881116ae0af5eceea2eb5963a508e8666d73068db142539c7d05cd8ada24093aa27cfc9487b1a3c933dd49356f0b23400b558b20cb5b5e7b6106ea43173","ssdeep":"768:YWjaek1WWN6PhdFKz2oeB3RIMVo5bKiQBABkl5ccq2O/SMvoc6cOczcQDO7O:Faek1WWw0KoeB3RxGdKikxln/i","tlshash":"c34308a0ba203c3930afb52694db26857334755ac90e2db8b93ac0c65ddcec67197f35","first_seen":"2025-04-08T12:50:13.755595Z","last_seen":"2026-04-18T22:01:51.062784Z","times_seen":200,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":52,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/css/common.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/css/common.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Feb 2025 15:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4c4-f71\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e5b033e1840c9ced6b1373bd703f48c4","sha1":"39b3c23ca20086705ef134eb88b287704aad1931","sha256":"c2485a8fcb032d8921a78c0c0956e8842f4b6cdbcd2a0266cb1197ef96726f47","sha512":"f0c5d2797a9182391247dedae9d6449b46fcbda7f4b2ad8f30bb243cf474ae87bdb1fa48a4fbcd3e81e512e135b4acc0bab7e10478f99728dddfec414a92d565","ssdeep":"","tlshash":"818102b226353e44b519f4bcae60bfd19b2a4126bf0f0d562491b43cc3859f8077b28d","first_seen":"2024-08-17T08:27:12Z","last_seen":"2026-04-18T09:31:25.573029Z","times_seen":1266,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/goals/6370f9ed4a3eff10dc46a2a1","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.1.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:53.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"OPTIONS /sdk/goals/6370f9ed4a3eff10dc46a2a1 HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper\r\nReferer: https://www.pacetonet.com/\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\nallow: GET, OPTIONS, HEAD\r\ncontent-encoding: gzip\r\nld-region: us-east-1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1766851434.999916,VS0,VE1\r\nvary: Accept-Encoding\r\nage: 0\r\ncontent-length: 23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":61,"dns":25,"connect":13,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallback6f1e.jpg?la=en\u0026h=791\u0026w=800\u0026hash=0EC17E8E020F13743DE35F8775CE2098","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallback6f1e.jpg?la=en\u0026h=791\u0026w=800\u0026hash=0EC17E8E020F13743DE35F8775CE2098 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:00:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78c9-116c1\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71361,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 800x791, components 3","md5":"f1b8235ba814dae680d4efc3b67f3ac7","sha1":"8876d3dab31b235a980c1d1a6a4e268b864231ab","sha256":"b155c348b600bd3b0d6363fe144d252980a3e29bdbcd60fdd25d1f12333b9653","sha512":"eb4350c06f34dc3dbb12b9c02a8dc0700433ec7e99245a07a68460c7dfaceea4f4c103e73384f70125cca8121af7d2fd3fedb9a4037aaf9b1baeff5d9abccaef","ssdeep":"1536:lTlDp4mHSiMI9gBy9OaSlJz0DvCZcJUI+uUJCS0ii:qmzgByhepSCZ5I+JC5ii","tlshash":"4963bf47cd9c85c36a9a42fded870db85b492a1868003bee01b62d877ac11f51dfb47e","first_seen":"2025-11-23T10:22:06.105782Z","last_seen":"2025-12-27T16:04:42.381708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/77022_social_400x400-1442374624.jpg","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/77022_social_400x400-1442374624.jpg HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:01:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78d0-18d9a\"\r\nexpires: Mon, 26 Jan 2026 16:03:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101786,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=4906, bps=206, PhotometricInterpretation=RGB, description=Close-up on a doctor holding the hand of a sick woman in bed at the hospital - healthcare and medicine, manufacturer=Canon, model=Canon EOS R5, orientation=upper-left, width=7784], baseline, precision 8, 400x400, components 3","md5":"6c021645d1cca76564d58f4edeb9084f","sha1":"00f9fd80d2a668e50be16695ebf982bad45ce12a","sha256":"1149b80da7f3275ba80664cb9b278deefe81bfb83be99842f37c037975bc0580","sha512":"d4a3705b09962cefc7140acfa4c127b02f643e6bd9d7a02357f22692dff550728b9158b5747620eaa2db20514a3b8c6a53b2088dff5747ae77d5aa780b75b96d","ssdeep":"1536:opTnZWEF5loRJya7tzOA2UT6/V9HdzGZ8ExiNasK37z1V7U2HG30V8i0kCPaLuP:Mpo17dOAx6dVVEx5sKz7A7wL8","tlshash":"eea3f219eb53de01f4e003b494f6dbc18360ab578be3c15976ad281e3bb67c25868277","first_seen":"2025-12-27T16:04:42.382576Z","last_seen":"2025-12-27T16:04:42.382576Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nCookie: calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.pacetonet.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Sep 2025 09:00:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78bd-13109\"\r\nexpires: Sun, 28 Dec 2025 04:03:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78089,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1801)","md5":"55b9047a0925695ee7511007380dc78b","sha1":"8f87c92c11778f019b822043c820c1f006da3b6d","sha256":"eed74353b63e3d48771f224decb304fcbb4a3199d71a391c89a9f03bc1993457","sha512":"a6b78e485e394dd0ae59eb05d456b0474ad9d91b2ea32682fabcc3028d67e1d805537011d1bd9bd47d3643c29731a912c2b0f9bfc770abc8e5aaa104d74bcdde","ssdeep":"1536:Xx5c4EtzSuSgUARQVzKhDHSFli6DZE7ijlv2sjiPwNWrY:Xby2VzKhzKpRjizY","tlshash":"fc73c7ccb6a671618267f5f5413f000fb23b59a9e8484dacf288d8e16eb5948413bf7d","first_seen":"2025-12-27T16:04:42.371291Z","last_seen":"2025-12-27T16:04:42.371291Z","times_seen":1,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/other/l3eab-2?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026amp;fvd=n3\u0026amp;v=3","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /other/l3eab-2?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026amp;fvd=n3\u0026amp;v=3 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/css/hav4bvx.css\r\nCookie: calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.pacetonet.com%2F; __vtins__Kbu0ae6HwHakHTZk=%7B%22sid%22%3A%20%22577bccd7-1c46-5dcb-a834-96c77784d867%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201766853230868%2C%20%22ct%22%3A%201766851430868%7D; __51uvsct__Kbu0ae6HwHakHTZk=1; __51vcke__Kbu0ae6HwHakHTZk=1ec92c1d-7dda-5ff4-8431-794329d936d3; __51vuft__Kbu0ae6HwHakHTZk=1766851430874; __vtins__Kbu1VAlblxqDdZFw=%7B%22sid%22%3A%20%220c4ca9af-932e-5b31-94ea-1b1a4872fc3b%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201766853230901%2C%20%22ct%22%3A%201766851430901%7D; __51uvsct__Kbu1VAlblxqDdZFw=1; __51vcke__Kbu1VAlblxqDdZFw=9c898e3f-8845-57c6-b952-f8dcc8853e42; __51vuft__Kbu1VAlblxqDdZFw=1766851430904; calltrk_session_id=aed4644a-3d18-470e-8334-afdb8d7623f0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 17052\r\nlast-modified: Wed, 17 Sep 2025 09:01:46 GMT\r\netag: \"68ca78fa-429c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17052,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 17052, version 1.0","md5":"046e16b64eecbfd7086bba50f2f46981","sha1":"e9e758f02fe64cba26ada995cd94b1680b9541a1","sha256":"6ca123db8c4e1ce21b2eec77f927c0563c64f04d8fc6c94aff8739eef4ebc9af","sha512":"a71bdaa28306798e8cfdce428af5c75b60493008a3e3f3b01830afa729cdd2928545738554dcee9cb526ef01652ef3fd8f794c22e2863ac53341f12e1a425fff","ssdeep":"384:g50SwlXscmine3w+PRPSf/XV6btzHiYiLdQlEyXHpon9pfxAUAZ8/es:3XsFpoftWUHBQWQon9ymT","tlshash":"1c72e068f36017e1d9f205f6bbe292948449764e1e1d25ca0ecc9219fb403ab6075bf0","first_seen":"2023-04-05T23:24:50Z","last_seen":"2026-04-18T20:30:37.683238Z","times_seen":1081,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:52.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:42:47 GMT\r\nexpires: Sun, 27 Dec 2026 10:42:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19265\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-04-19T02:33:51.784392Z","times_seen":42260,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/wtower%2022942.jpg?la=en\u0026h=600\u0026w=800\u0026hash=22B85EAD4A9FC7AC3702C85CB431969A","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/wtower%2022942.jpg?la=en\u0026h=600\u0026w=800\u0026hash=22B85EAD4A9FC7AC3702C85CB431969A HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:00:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78c7-6408e\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":409742,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x600, components 3","md5":"405fb4a525d2ba212774189264aad63d","sha1":"b59bc80863ef9d572eb81a2b6b8c47194c529c29","sha256":"046e3b9691b5ca1efc93b4be80dbc1cf4f627c84fa3e9687e24090449f7a8359","sha512":"276272f059d4ba7b91d8c74125ad77b87ba2af3e68187c4a97430b6b9f96c3d762b7802fe9086e06a308fea108c07e5f5798799651a38a8babc2a5dac185da43","ssdeep":"6144:eqRJpMqNZyGV+KiO14SrgflxSmQ+wAhPhxWHJmVa/3STLhdiM/OQbMBVV:LHpNlV36S8fWmQ+wAhJxfVaqvOoITV","tlshash":"ac9423714b9bfeefd6697715ba5ac15329a44f22fa1bad70856010a3b2344f100ff4e2","first_seen":"2025-11-23T10:22:06.102917Z","last_seen":"2025-12-27T16:04:42.384473Z","times_seen":2,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/png/badge_android.png","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /png/badge_android.png HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 Aug 2025 14:28:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a72d00-125a\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 80, 8-bit/color RGBA, non-interlaced","md5":"e6d552c5deec92675d47f9b89d816ab8","sha1":"d3ec3c38d6fda2e589d860c57721e7c25ccecbdd","sha256":"faa29e49e7d6df027fde006b0e7ba588bc55028f44a81a699f8e2c53dd26b2f7","sha512":"0244dcac85d39e4b55c08dbc0a5d7dd22bb0d174f0b98586a9afac5d894f5c47eea84452291456a2eb235e64d687b7162cfaf14f1434b7337fe53294a9acb0ec","ssdeep":"96:+ANo9GK/5m4GVLzbz+/cgtfasHqLf640WkwAwjnU6LrGuDcOs:M9GTRVLqcZVfPrAKQms","tlshash":"e7a17db2b92ce286b4e62ceef8d7b6757c43441c1b5557b8e0509acc6164f0c2c6db72","first_seen":"2024-08-16T21:56:48Z","last_seen":"2026-04-19T03:16:30.149421Z","times_seen":895,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/bootstrap.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab6-eb14\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59893), with CRLF line terminators","md5":"63534c9e99f47f6ef78f918a2c045247","sha1":"c49fcc7639bcb59147903caf71a4977c8fa19a67","sha256":"c7390975fc3e41ad5ec9d1870edc3103f7c498dd82dce4bbaf22a9e7bba96b77","sha512":"843e83f4a60732120e766f7c04053fe90235ef48ccf548cd0199a64e3f622b6dfd5aa0a0445198f74ece9b63149904e1c2af13db988c97bebff5c2d44007b1dd","ssdeep":"768:QklcnSRAIvHVAYIE8Pg76Tjx4vbh3p6viDl0TS6SXH6G7e6Pxh35CCmVlaFV:Qkl4SE0MJS36GPxhAV4","tlshash":"d043a54a7254787206df647a817b060bb3366c99a40a816cb8699ced2f7cd493277f3c","first_seen":"2023-03-07T12:03:40Z","last_seen":"2026-04-18T03:36:01.637037Z","times_seen":371,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/png/emerging%20leaders.png","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /png/emerging%20leaders.png HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Sep 2025 09:01:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78ce-448af\"\r\nexpires: Mon, 26 Jan 2026 16:03:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"f3b4a80df312f711e9738ad1cbff1a01","sha1":"271233fb0721f4fd1d25236155b929602f346678","sha256":"8878815db6943925a8c4a3336731a47060c9a10a87a067a05a500b1c0cb06f59","sha512":"68b39230b6b3f49b6cad82266ddb5e45a3cac4687160fcfbb15642763304419a8c12d83dfd73a36bbe81511a2031093043c480f6d386d5f965afa7c2fb97f2d9","ssdeep":"6144:DyBpJTAkyLt5ImojdORG388ptDsSKEKspVY1d7aSGZma6HUg:iJkkyKQYjDpK8pbpm7Ug","tlshash":"8954231fa8e35a79087e71e557580fe0eb63bd28c2a527802134708ece098c67bcb759","first_seen":"2025-12-27T16:04:42.386415Z","last_seen":"2025-12-27T16:04:42.386415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/parameters/getNoAdvertisingDomain.do","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /parameters/getNoAdvertisingDomain.do HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"7ecdd0ccad41cd367a2c8ee896934a33","sha1":"81a85a497a6d3c1690aec93a1d32d8df034cb9c1","sha256":"ab2996705a41b5da716b687ca0d29d6601350807116ac265e5a17a0ea47a70e1","sha512":"a972c5d286ae479e80fd58d0a812cd0bd4ed618b92f22a44f33638338bbc810a5ddf8a4885fcdd906cba8124f2abbf5508965d0b433b0d512faf6f8e98ade325","ssdeep":"","tlshash":"e041f17b6f1c35db32a506d12ee16c84417cac761f71d8f59729320584e47ac0e5e2de","first_seen":"2025-08-13T13:08:13.288581Z","last_seen":"2026-04-18T09:31:25.680198Z","times_seen":1177,"resource_available":false,"data":null}},"time_used":2332,"timings":{"blocked":1000,"dns":312,"connect":227,"send":0,"wait":331,"receive":0,"ssl":458},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/img/bg_icon.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:52.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/img/bg_icon.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/css/public.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4d0-3c2a\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 948 x 404, 8-bit colormap, non-interlaced","md5":"821582b0c313e76c4f0d979664edf668","sha1":"dda5e9d9e4cee99daf3af76f83ffab6b712e7697","sha256":"a5c7914a21f1db358506caaf95ff6d1838769e4c303e6cfa5ebbacdb0b97643b","sha512":"160d5161b10f7bd73c5662b492bd83bd8caaaf1e140aa9d12e44e8aacd25d5124abeffa1d2f1ebbbe4efa0ca8e1b1ab5bba984057973d0677c5e88ef433d681c","ssdeep":"384:CzJsgcvepxLlsLiqMcNrr/OabQ+7211haD:C1sOpxAjrOaU+72jUD","tlshash":"2962c09588d5790b3e243be38e1524237a7ebe5342b0434b8606743e1f458bb286bad7","first_seen":"2023-05-02T12:59:34Z","last_seen":"2026-04-18T09:31:25.611083Z","times_seen":1380,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/index.ecba9def.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:53.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.airbud.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 13:29:13 GMT","end":"Sat, 07 Feb 2026 14:23:47 GMT"},"fingerprint":{"sha1":"ED:89:3C:C1:D3:04:46:A8:BB:15:66:B8:2D:2F:A9:EE:32:C6:5F:93","sha256":"78:5F:BD:37:E2:24:C6:B8:83:20:57:B6:2E:29:DD:BA:C9:36:9F:02:96:21:04:B7:AB:E3:6A:58:D2:98:22:F9"}}},"request":{"raw":"GET /widgets/static/index.ecba9def.js HTTP/1.1\r\nHost: api.airbud.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AHVrFxN9WFeLkPGNmGSyxeOwEtH17uM8chkG6fgGwmD7B5BaLXQiLluYd5vOZnDoHSlgbvo-\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\ncache-control: public, max-age=86400,no-transform\r\nexpires: Sun, 28 Dec 2025 16:03:53 GMT\r\nlast-modified: Thu, 11 Sep 2025 12:06:25 GMT\r\netag: \"aad984c8f0c5439776b6583e27f604fb\"\r\nx-goog-generation: 1757592385537921\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 242194\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=WBLfYQ==, md5=qtmEyPDFQ5d2tlg+J/YE+w==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 242194\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":651138,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57562)","md5":"9ba3d9628beef8e02db17271811dabdc","sha1":"d2aba6b80a0bf575887a2a7cb7742040f61d96b5","sha256":"e234afee70066c056093990fd703dc0ebaf3414d02c2bb335e140443f7a624d9","sha512":"b25d8f807637dced5acb8ad0fb59e23b026dc98fbc838910b5a448462c7ad78d38b7a8ba51c499afe785ffe09a14fe3cf837b6a523e6f0d78deb0936d42e9392","ssdeep":"6144:Rs7FiVY2Vb/c4+WoD1EOz6derOGKs4TvUuYZWrvhjsNuaB4gvhE8Ofnc:Rs7yY2VbQRmgrOdR5F50mc","tlshash":"22d419c976d2b06543a361b1003f240bb37a5d3a780dc490f216e9d5bdb994e927bfac","first_seen":"2025-09-26T16:05:31.570739Z","last_seen":"2025-12-27T16:04:42.388592Z","times_seen":4,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":240,"dns":40,"connect":13,"send":0,"wait":262,"receive":86,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/js.cookie.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/js.cookie.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab7-693\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1650), with CRLF line terminators","md5":"cd41eaa4940db6f2f6ae5b82a0270f6d","sha1":"a6cc8e069e17bcee2d9f60ea4f92cafb101610d4","sha256":"d3a905ed0b4d87c3a91660ac74cef2b4cb4958d6bec2f719c1de3143fa5094ef","sha512":"3e5d0f3c19522344d9cc7f0276c177100823dba03ed96fffbaae222d8ac163f85f1cbe8a2eef4737080977f26ecc0ed2390f3e47b698cb4608201b9bd9f288bb","ssdeep":"","tlshash":"5631b8ee3095a8da07071450463f1207f2f91e56eddd98802264e4f50bb077a01e7f77","first_seen":"2023-03-13T19:27:27Z","last_seen":"2026-04-11T13:52:57.323794Z","times_seen":591,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrmB_KWSlQAE7ZYeg_m4Q2fEerx6A/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrmB_KWSlQAE7ZYeg_m4Q2fEerx6A/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 77117\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\nexpires: Sun, 27 Dec 2026 16:03:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 12 Sep 2025 01:08:39 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223012,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2601)","md5":"dbfca7566c618715ddc872c4792068c4","sha1":"c9e0e1e5ff15fa615e04792cf9a97ba04de31afc","sha256":"a3f35fd4257fc20da36e4689e22dd89a9e77b2c97bef047a64c5d252c485e150","sha512":"287082c1363cd2cc6899a8227c705d7e71bfef13923180d56967243181b6fc1c0dc115ba8d8da3871b614756b2539cd2880beb1f34d69cad1cac5f1ec3e43501","ssdeep":"3072:xv0JwHWSIiKU4biEIiHNcDD1TC7VS5JdmeZfuz7AKUSOsQ+dWsNsDEp:SpNUTnigvJVsNsDEp","tlshash":"b424e7d9b35270669363f4a6913f000ea13b68a9f9484d6cb28de8e25df4d19017bf7c","first_seen":"2025-09-10T19:46:21.031861Z","last_seen":"2026-03-20T06:37:00.365078Z","times_seen":1865,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":116,"dns":1,"connect":9,"send":0,"wait":49,"receive":7,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/vendor/jquery-1.11.2.min.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/js/vendor/jquery-1.11.2.min.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456caa-1787e\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96382,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6355f3cc28006e33bad2e765cde30e0d","sha1":"909cd6318d5047f3c8e83528253b256981394414","sha256":"39eed2d24faf4985b922b64d078f106edba6b3b84d5385e483a5c7bd69201da7","sha512":"b22d3868a7b311f82bb149f8afccee03c68dcd5e7152a061b8e18d97aef794b106dd1cc081d49f4d638193924ffa5885239cf67152fc339ff0cf3cd1d194d175","ssdeep":"1536:0Hg1kz+hAmcGmVFnlkFybx+amELolY+30k1dml+BQZX6YPnrCtn8JkDnlwMxVW2:0HDdc2F3c2G7mIW2","tlshash":"13930add76c2b06387a720b9506f550bf276599e280c4440f268e8fabc7ca49a137f7d","first_seen":"2023-03-07T12:09:32Z","last_seen":"2026-04-19T00:08:48.827807Z","times_seen":1655,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery.validate.unobtrusive.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/jquery.validate.unobtrusive.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab8-199b\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269), with CRLF line terminators","md5":"e7f44f12c126272b172557362aa8f436","sha1":"34839dbf78a27afeb0ff3642b5539d8d9c477754","sha256":"91b5c122e8cf2da8a1d8cfe630cd96ea1c3846e1dfad8c52a67561213bc22ad3","sha512":"579291c75011ef3c56dca078cbae24b9e141bde9fe10cb1e5961a9960bc6693a15d1f58ff26d8f61c9808f0218c78f52afa297246ec7b201a1902d092ab1de54","ssdeep":"192:zv+iwjx/Hx7W4zoR9TiweeAzTMEt7KQTkG98jWY7bF5Z78Le44R5SNK:SiwjVxxz0ehz7VX6CibFrILe44Xf","tlshash":"d3d154493395232b89ebb0f7988fcc0ab6b1566871c14449560c85f0ec7cde8a767dee","first_seen":"2025-05-01T12:29:51.974291Z","last_seen":"2026-03-27T20:43:28.618932Z","times_seen":15,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/road.jpg","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/road.jpg HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-2d962\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2660x520, components 3","md5":"96743d197914f1aaee78a7be7248846b","sha1":"04ba44deb987a8444c78abb0084cb6839343dab8","sha256":"16fca4f6604344116b03a3e974c9f554161084ff3e52a279c208826b5af3c294","sha512":"648d475137a0788b8f4f492a5176d0e5016b1c70fc0597ce393e940ba0eee7afddcce24dabc6d7fa11c64d9b67e791198edc5d1d743614ae3bbdd6437951bcf1","ssdeep":"3072:PeEUjkP0V+uDqbZbEUFXOVORH8KqXcm40sRMdJnVs/EVmxxShyqB:GEU/sHbKpeanVs/EVkxSEs","tlshash":"780412aadb0211a9b03e1d4b32822d966f2914de5ff1094b3bf3d70c6778d65b19c491","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.573698Z","times_seen":536,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/result2.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/result2.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-2860\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10336,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 258 x 139, 8-bit/color RGBA, non-interlaced","md5":"c7351dbb544963a165c52064cfe491c5","sha1":"1a67cf83841da6ceab8d019d1b0f8a537aa453b1","sha256":"a274baa8fb9b93fe2d067c8f4277c1e06a6477e8bf5e0275794f8e8f9a3ba585","sha512":"34e4956901d40f29293cc383e746eb1ee538d5ec9b5474a3695a4cded2ea1b94e1310a2533b7d7dcb1e8ffe95745fdffc3ff538ecc072939e27464586e58a0a6","ssdeep":"192:jSHx0g9rTb4bQL1fCe0esEjwf2Xbmi6JS3/9EzDhcElf3ONHZf:WvTZ1fl0eHXa63lUONHZf","tlshash":"6522cf404f57e0049ee83b85725d8c48b04503453dabac4aba9bc23cddaf218a9fc4a7","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.581693Z","times_seen":534,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/widget5445.js?id=a2d7690b-7f78-45f6-9c5f-f9da0f3814a9","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:52.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/widget5445.js?id=a2d7690b-7f78-45f6-9c5f-f9da0f3814a9 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nCookie: calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.pacetonet.com%2F; __vtins__Kbu0ae6HwHakHTZk=%7B%22sid%22%3A%20%22577bccd7-1c46-5dcb-a834-96c77784d867%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201766853230868%2C%20%22ct%22%3A%201766851430868%7D; __51uvsct__Kbu0ae6HwHakHTZk=1; __51vcke__Kbu0ae6HwHakHTZk=1ec92c1d-7dda-5ff4-8431-794329d936d3; __51vuft__Kbu0ae6HwHakHTZk=1766851430874; __vtins__Kbu1VAlblxqDdZFw=%7B%22sid%22%3A%20%220c4ca9af-932e-5b31-94ea-1b1a4872fc3b%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201766853230901%2C%20%22ct%22%3A%201766851430901%7D; __51uvsct__Kbu1VAlblxqDdZFw=1; __51vcke__Kbu1VAlblxqDdZFw=9c898e3f-8845-57c6-b952-f8dcc8853e42; __51vuft__Kbu1VAlblxqDdZFw=1766851430904; calltrk_session_id=aed4644a-3d18-470e-8334-afdb8d7623f0; ssi--sessionId=7d134884-e1e9-99ba-09fc-e2281e8056e5; ssi--lastInteraction=1766851431155; nmstat=c0fd1d99-15bc-b1e3-a01a-9ba9c4be0064; Hm_lvt_9449080f1fd9d69519fb3ef29e931160=1766851432; Hm_lpvt_9449080f1fd9d69519fb3ef29e931160=1766851432; HMACCOUNT=FAB1AAF0C433F322\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Sep 2025 12:06:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c2bb45-10fa\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4346,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"05ddd3eef71e77f24c4bd986f7e0bf2b","sha1":"a8f344dee25867eb93b0b76b5daa843db36afd7c","sha256":"a6390125a1ec380bf29c4f8bda3759c20923493dca5d4ffcd9e99ce11580d1c9","sha512":"e37d502e17661c80ea1f9d37de0010a194df2c690befb2acd484950a08381e177a298174d4b09e6df931a4599c43c2af1974150749e157eee6de66b7f39a61ee","ssdeep":"48:MPDc5JdCmudCDOowUREtdDlvwUB6gShqXVxA/JyuOMfxjhUh5+TML4jBMXEaxc3+:Cc5aXsElGZrWQTML/XEaxcvvFM","tlshash":"0b91dd9b3cb2c164921106cfa1b7eb4cba8150b53160c4f2d5fd888e2de0e5359ea3dd","first_seen":"2025-09-26T16:05:31.487537Z","last_seen":"2025-12-27T16:04:42.392835Z","times_seen":4,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallback90c0.jpg?la=en\u0026h=600\u0026w=800\u0026hash=19D01DDC12CCF08774D9E1D74C7F8735","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallback90c0.jpg?la=en\u0026h=600\u0026w=800\u0026hash=19D01DDC12CCF08774D9E1D74C7F8735 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78c8-29b92\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x600, components 3","md5":"a51683e3f8e3f08f6432a4f163bcf53a","sha1":"a0e4dd78c92bf9e72f154155fd0c79da18370561","sha256":"1a9630a9d8a26b3605147ebac7946fc6ab2e52ae17a51635b0e754bdfbc27a51","sha512":"36d14568ad8a11ad2dac6847f36c8f1fe6932a939741dafcf14f35cb58e9bde97db1b6ef7c60dc7306927ef838dd2c96ea352e65fc05e0fca404632257c6c81e","ssdeep":"3072:7gtBZXGa5r+5k9avAhde9SF5rwy2www9AMIznXjYqDHnJkWzV:7gtXVmk9avAbe9s5/Az7Xeg","tlshash":"5ff323796ac777b93a2492b9cb7987f5111e17a6c30f0fe4a5cd7eb2a462138b10484c","first_seen":"2025-11-23T10:22:06.074477Z","last_seen":"2025-12-27T16:04:42.393747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.174.229.25","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 516\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.pacetonet.com\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\neo-log-uuid: 18422749604891421828\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":283,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/config.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/config.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca8-2ad0\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10960,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (485), with CRLF line terminators","md5":"10106a1e8e5e06f53a764d342a35c4aa","sha1":"915b3ee797d65abe0b60fe010a74d498b6f64bd5","sha256":"63d27f44ed0945cf0984058cfc3a3f2e90dea931dc295cda51a9ae6cbf6dc54c","sha512":"632eb5ab0add23e13d0032da2eaca5efd65c505a785d10fe40856326413975ec7d208d3c768e775adb8eb36b3ac33aa2b22a62cf67a1af9fffe6d2e48f13efc8","ssdeep":"192:qSa/WVpaV8Sx4AKtPxlmrwGGfdc8tAWY1qZm:qd6I+o4tPxESc8tG9","tlshash":"e432211b845043a66173d779247a2e48e93a135f80158c5b3fbd4ac48f3be3a8059fba","first_seen":"2025-09-10T11:21:24.653918Z","last_seen":"2026-02-01T20:27:06.325243Z","times_seen":69,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/wheel2.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/wheel2.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-8fe9\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 309 x 89, 8-bit/color RGBA, non-interlaced","md5":"6e872446c72eeddacf03787ab418ed13","sha1":"8354b881911cfd421a3053042d4070e9c3622222","sha256":"c2df2af7a255aa1c9d7f875a8fe7fe03c6035bf32fd297311a5c456b2135b009","sha512":"0b9a701f7bfcfdad34b69d31a3ca88b968d0d8461c856ba1664d590a83fef98e9b3e7b1bcff73b033be99e7079724a11c09478453a1ca066a3f10e87dac2610c","ssdeep":"384:G4tp9VR7lJbL+pmwSecxq16NUg50HGJ0FDzRKUpOcgKIKAG2nW:7txRLZPf5IGkRKUpOgIKA/nW","tlshash":"72f2c014bcf6b07899a7a1ba1ce960065c77cb439662ecc4f7fcc8147f8676c8d0a51a","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.613176Z","times_seen":536,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car2.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car2.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-5ef8\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 41, 8-bit/color RGBA, non-interlaced","md5":"204c004fb9f85b08048d5f50069841c7","sha1":"95053ebf10ae8c2d5daf1a2fd4b67476e26bf805","sha256":"bee52686feff4a4586aa3b7252b9087d239136a0d2488ac12f6777df2faf8d28","sha512":"8ddfce48e40f45bf9abc7f47ab7f2583e7c40f210079142e64953a267b6b060aedd5a2438ccd587cb4d6bac37fe7125bd4ca2860c07c8abd6f278ecd7a267483","ssdeep":"192:CShkte5BwGx3rGRCMlqz9okw0uBV36OGEUUZ8Ag8ByzR8UL4InSYIRIrSq0C:d6te5BwGxiflW7wVmve8F8aHLSY+IriC","tlshash":"09b29da8beb13a24c806d232eee4744888224547d4d6fd46b5ce18ba5f4cbec5c9f681","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.648557Z","times_seen":537,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"68816.global.siteimproveanalytics.io/image.aspx?url=https%3A%2F%2Fwww.pacetonet.com%2F\u0026title=168%E9%A3%9E%E8%89%87%E5%AE%98%E7%BD%91%E5%BC%80%E5%A5%96%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2-%E5%85%A8%E7%90%83PK%E4%BA%94%E5%88%86%E5%BD%A9%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95168%E4%BD%93%E5%BD%A9%E5%BC%80%E5%A5%96%E6%9F%A5%E8%AF%A2%E7%BD%91%2B%E9%A3%9E%E5%BC%80%E8%89%87%E7%BB%93%E6%9E%9C%E7%9B%B4%E6%92%AD%7CSumma%20Health\u0026res=1280x1024\u0026accountid=68816\u0026rt=2826\u0026prev=c0fd1d99-15bc-b1e3-a01a-9ba9c4be0064\u0026luid=12478860-af0a-5a55-2e2a-fa21fa40e235\u0026rnd=49562","fqdn":"68816.global.siteimproveanalytics.io","domain":"siteimproveanalytics.io","tld":"io"},"ip":{"addr":"51.21.153.120","port":443,"asn":16509,"as":"AMAZON-02","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.global.r1.siteimproveanalytics.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 21 Dec 2025 00:00:00 GMT","end":"Tue, 19 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"44:A3:83:CA:49:DE:0C:8E:4C:7A:F6:D8:36:1D:3C:9E:EA:E2:F3:F1","sha256":"26:D9:57:CB:9A:93:29:9F:A8:F6:FB:59:1A:69:9D:1F:24:83:D1:CA:20:00:92:1F:98:7B:E3:C8:DA:F9:B1:70"}}},"request":{"raw":"GET /image.aspx?url=https%3A%2F%2Fwww.pacetonet.com%2F\u0026title=168%E9%A3%9E%E8%89%87%E5%AE%98%E7%BD%91%E5%BC%80%E5%A5%96%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2-%E5%85%A8%E7%90%83PK%E4%BA%94%E5%88%86%E5%BD%A9%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95168%E4%BD%93%E5%BD%A9%E5%BC%80%E5%A5%96%E6%9F%A5%E8%AF%A2%E7%BD%91%2B%E9%A3%9E%E5%BC%80%E8%89%87%E7%BB%93%E6%9E%9C%E7%9B%B4%E6%92%AD%7CSumma%20Health\u0026res=1280x1024\u0026accountid=68816\u0026rt=2826\u0026prev=c0fd1d99-15bc-b1e3-a01a-9ba9c4be0064\u0026luid=12478860-af0a-5a55-2e2a-fa21fa40e235\u0026rnd=49562 HTTP/1.1\r\nHost: 68816.global.siteimproveanalytics.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 34\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Sat, 27 Dec 2025 16:03:51 UTC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"a82ba3a9d42148e9cf209df13d8c3f3d","sha1":"dba80835d31175bdcf0bcad1abafefb06d86e304","sha256":"1e85ec81b9800b4c443d39caca0d0926089a3ac201120db1ceb45b93789480b8","sha512":"97777a4b16bedd7547a46b1ab1d146c50c1547bbe23c70708806a357352a1291a4eb6cdae049d0e334f33903dbc98d7054eb5bff84dab0edcd091241ebbe5353","ssdeep":"","tlshash":"d9800023b2a08880c2cac0300c0aab802baaa0200a20230fb0ac038c2c3a3b02c02000","first_seen":"2023-04-19T02:04:42Z","last_seen":"2026-04-19T01:15:17.409872Z","times_seen":6887,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":148,"dns":60,"connect":10,"send":0,"wait":11,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/iscroll.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/iscroll.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca8-4db3\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19891), with no line terminators","md5":"3249e269b6bf59a9596ff4dd4908bd74","sha1":"16f804a74f66585bf01bb2217997a2a4ff0c4a23","sha256":"3b294972fe3c686a14d4195e17abc43199da904d959c9ffa128b3649b6bd925c","sha512":"f8fff231edd431cdad0e9426353abceb12ad72e1decfb110aa48f6b81fd061f9b2171bacba515069c1360df4a7cc451c1b0cdce380c4ecdd3849231bb4f07bc1","ssdeep":"384:KgC+EUMfCHqTj54QUX5WSMFqa7BU5TJe3c6OJsBeCWvtk7mSjjxaF:Kl+EUnqTDUX5UFO5TQc6OJsBetO7BlaF","tlshash":"2792a4889112338245ffb399dacb860d607a9339671750cc3929bffa6a447b843d367c","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.660422Z","times_seen":1392,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/scenery.jpg","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/scenery.jpg HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-2f227\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2668x174, components 3","md5":"b740fb8f824213fadaf41c7622b2da7e","sha1":"2abafac7970645fbeb4aeba33720e0743f416077","sha256":"46155c53eeed3331495493562c05212b8ae791bcc35d6a8d2d48fd884e64ae90","sha512":"1c9f77383623a0665c7367afbe52e985873e64621b7a1649cecfd28cf70734166450b043e2646bb15b1a48a1fa351619c0c1cb221e199dcf2490b8ced2441b4b","ssdeep":"3072:alr5wLbKv3C+nmFaqvOYTEoaqRUE677cGcjXGez8yXjb9bzFXGAjlFwfhuSSeY4u:+5ZP4vOqPlRU/ucYjbBFXGSsPY4oDUJu","tlshash":"5a14122d68790ac1c1c941f7e1389d9e30e7b0ed91c869f7854740a83d1e87985e9f8b","first_seen":"2023-05-20T19:29:41Z","last_seen":"2026-04-18T09:31:25.599514Z","times_seen":533,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/result3.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/result3.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-19dc\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6620,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 173 x 112, 8-bit/color RGBA, non-interlaced","md5":"be7fd7fa0e29799955a302d66c77afa2","sha1":"61f978bdc35a8727eefcd154c44b4b3540329b41","sha256":"bd5a1e251193260c6228e90da9ba01844d8245f49d1741697cbb1a901ec95e50","sha512":"193b1dfcfca0f253749be071a1e33dbf84818ec6ce211b9895364e8d4cca08cf70f6e0185f071c1eb260295e51d7c817b80feebb6d99d62ec9df511ccedafe6a","ssdeep":"192:XSBTp46B6OeTdnM8UzuEV4zFcMlHg+f9KKUfv6YVAKqbPw8:CRRwOeTdnxLeijf956v3VlqLZ","tlshash":"e1d18f2c616b752f481b1bb8fb6318a642ebafb4faa5b10540f9180dbdd15337643a1c","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.441589Z","times_seen":537,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=FAB1AAF0C433F322\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=57921210\u0026si=9449080f1fd9d69519fb3ef29e931160\u0026v=1.3.2\u0026lv=1\u0026sn=27832\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.pacetonet.com%2F\u0026tt=168%E9%A3%9E%E8%89%87%E5%AE%98%E7%BD%91%E5%BC%80%E5%A5%96%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2-%E5%85%A8%E7%90%83PK%E4%BA%94%E5%88%86%E5%BD%A9%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95168%E4%BD%93%E5%BD%A9%E5%BC%80%E5%A5%96%E6%9F%A5%E8%AF%A2%E7%BD%91%2B%E9%A3%9E%E5%BC%80%E8%89%87%E7%BB%93%E6%9E%9C%E7%9B%B4%E6%92%AD%7CSumma%20Health","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:52.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=FAB1AAF0C433F322\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=57921210\u0026si=9449080f1fd9d69519fb3ef29e931160\u0026v=1.3.2\u0026lv=1\u0026sn=27832\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Fwww.pacetonet.com%2F\u0026tt=168%E9%A3%9E%E8%89%87%E5%AE%98%E7%BD%91%E5%BC%80%E5%A5%96%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2-%E5%85%A8%E7%90%83PK%E4%BA%94%E5%88%86%E5%BD%A9%E5%8E%86%E5%8F%B2%E8%AE%B0%E5%BD%95168%E4%BD%93%E5%BD%A9%E5%BC%80%E5%A5%96%E6%9F%A5%E8%AF%A2%E7%BD%91%2B%E9%A3%9E%E5%BC%80%E8%89%87%E7%BB%93%E6%9E%9C%E7%9B%B4%E6%92%AD%7CSumma%20Health HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Sat, 27 Dec 2025 16:03:52 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=ACE35CCA1719CC25; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-19T03:21:32.265553Z","times_seen":337822,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/bootstrap.min.css","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 14:46:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab6-27299\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160409,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65319), with CRLF line terminators","md5":"78903984a106410080a529eed5a5a611","sha1":"db96b80b0254549d991aef0e72e3ca0bdccc707c","sha256":"a547652943e11dd21e7a0c39fae37b84c6dd27de5efff7ea4f45cde43c938f89","sha512":"fd3e27bc58955758007b3ada075fd4e6c28f7e6cdf7097f1ed72b59896f60616a2b2436e4d670f6cf2db87c0d7e57cef0e01344aae5580070a4ef688f64696de","ssdeep":"1536:9THqIJOT7SyEIA1pDEBi8yNcuSEeA1/uypq3SYiLENM6HN26G:JH9vGGq3SYiLENM6HN26G","tlshash":"9df353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-21T22:48:06Z","last_seen":"2026-04-18T03:36:01.667886Z","times_seen":404,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery-ui.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/jquery-ui.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab8-3def1\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074), with CRLF line terminators","md5":"bcad1d60cf9cb3bb180a1a8339ed5529","sha1":"e045cf3abc14f3d1489828d51a47dd8fb10db197","sha256":"21cacca8e9eb98f1f32702b4176685f2f941af51ab5bc7cf88ccb5435a1bb080","sha512":"98c64d9b57885b57f687b1bf1c48dc87682dc9b7ffa16caf8e1d2d59a838cfa040cbdd03c4a04902996efbb6dbd87b3a7a5bd63c52cff1fc9b4c799dce5ff6bf","ssdeep":"3072:GkHOJo1g7SV7opRBbDrtnAcKzvFYi/5uLO1aG0qFf/nHOl16j:Ly/K3COVlFHS16j","tlshash":"ec44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-18T20:49:11.960802Z","times_seen":1521,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrmB_KWSlQAE7ZYeg_m4Q2fEerx6A/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.zh_TW.boEpb78LehE.O/am=AAAE/d=1/exm=el_conf/ed=1/rs=AN8SPfrmB_KWSlQAE7ZYeg_m4Q2fEerx6A/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 77117\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\nexpires: Sun, 27 Dec 2026 16:03:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 12 Sep 2025 01:08:39 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":223012,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2601)","md5":"dbfca7566c618715ddc872c4792068c4","sha1":"c9e0e1e5ff15fa615e04792cf9a97ba04de31afc","sha256":"a3f35fd4257fc20da36e4689e22dd89a9e77b2c97bef047a64c5d252c485e150","sha512":"287082c1363cd2cc6899a8227c705d7e71bfef13923180d56967243181b6fc1c0dc115ba8d8da3871b614756b2539cd2880beb1f34d69cad1cac5f1ec3e43501","ssdeep":"3072:xv0JwHWSIiKU4biEIiHNcDD1TC7VS5JdmeZfuz7AKUSOsQ+dWsNsDEp:SpNUTnigvJVsNsDEp","tlshash":"b424e7d9b35270669363f4a6913f000ea13b68a9f9484d6cb28de8e25df4d19017bf7c","first_seen":"2025-09-10T19:46:21.031861Z","last_seen":"2026-03-20T06:37:00.365078Z","times_seen":1865,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":57,"dns":50,"connect":7,"send":0,"wait":95,"receive":14,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/wind.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/wind.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-6bf1\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 47, 8-bit/color RGBA, non-interlaced","md5":"3b99abddf7fd6048c6b368d68d41d0d9","sha1":"70a95a40ba76e02ad7969aa1f1ea54b293243b6f","sha256":"c10b2cdd243cc3b26dd97e8227e05903eb134987a4f28a933cc58f71ac398653","sha512":"09fd5f94f3a715a7f1cb56a1278f31463a52302c942d2cbbacc111855921aa40b42034c5a5764983c193e550c84376db73bf7c95537b53adebc6d36e419c6025","ssdeep":"384:f50wqt851EzJGtFqhuqU4D0S3foqPhWNW08:h4tWDqU4h3fouEWr","tlshash":"34c2af48bc617ab6144d4172aed7a40759f382878a901dc8b5ec0c6b2f61bd72c4bb4b","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.529685Z","times_seen":536,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car6.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car6.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-6d7c\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 171 x 51, 8-bit/color RGBA, non-interlaced","md5":"ff29dd3a992060d40c623325c12afca0","sha1":"7b673c3e00d679592b75f0e53467c9c93b9d0d36","sha256":"3d6f8dcdc0e29f4f015c3fb00cf859032381cdfc2cc3090b1cd7dddb44b2e79c","sha512":"7186eddde554807bfd798cc0d65a9d4339d690390f6e6ae16627e8e9300519f9dd813e0aedaf689e2a901488692d645329454a1e5490ffa16d61a59d38aa4cf4","ssdeep":"384:66tS5B08Gh0Nl7sea0jyz7VWVX/UjxVbFoh:Ntkj+1WVX/oV6h","tlshash":"37c2ae197cf37918a99daa312ea071b68ca7ac831f945c05f1cc8e47bf45b814c4fa86","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.606745Z","times_seen":536,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getPksLongDragonCount.do?date=\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:04:03.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getPksLongDragonCount.do?date=\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:04:03 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":631,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"6420960b3d11d3982b3be1750b710997","sha1":"00373009db95a354c0861faa5e9fc3a3573eefdf","sha256":"756e4a1a99367abee28ac04b5d7dc48ad0f016139766875841078bceeebed60f","sha512":"9b9d11662072abb01f13dafb8e6946be3afdd4609d2d9eac64bddc952ea539fdd5845df983db7156007a29938ca859add9275204a93d1a96c0b13a0bc8833897","ssdeep":"","tlshash":"03f036aaba15341fadc90f2df4faf235a0a012514e4c9bd1c1fe0831274890db16fe90","first_seen":"2025-12-27T16:04:42.40165Z","last_seen":"2025-12-27T16:04:42.40165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.-q5RMtA6wjE.L.X.O/am=gMA/d=0/rs=AN8SPfqtQ_D_EH9SdWnMTx6DoLO-0hN4Hw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.-q5RMtA6wjE.L.X.O/am=gMA/d=0/rs=AN8SPfqtQ_D_EH9SdWnMTx6DoLO-0hN4Hw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 4229\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 15:42:41 GMT\r\nexpires: Sun, 27 Dec 2026 15:42:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 22 May 2025 01:09:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 1269\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22936,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (22936), with no line terminators","md5":"a92e5b9b3aa81d372d2156f002937e9f","sha1":"7638c3326f25787916864350f3b390b8228718a6","sha256":"39e523caf1f8f774c26976a68dec7f89e9547b7bf543570eda8622ebc89f1bb2","sha512":"bf9fdea1c6aaf587cda128b47b342592bab682e9940a1390a2b9f5d3c8e042f81097498deaa1f2866778ea47f16d321f07f63c34d8a435da9469ae1b0312e0ac","ssdeep":"384:kM78SZevMpWhFzoqC+FqW5YZpTpIQoPNYsCBG:17FevMgLQoPOG","tlshash":"c7a2cc21079ed019a3afe81351d36dff72d488db50113eeaaf5a3752ce822f231da215","first_seen":"2025-06-25T17:11:36.156238Z","last_seen":"2026-04-17T04:52:31.959486Z","times_seen":124,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":94,"dns":1,"connect":21,"send":0,"wait":22,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/img/cltj_img/px10obj.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/img/cltj_img/px10obj.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/css/pk10.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:37:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4d2-b3a\"\r\nexpires: Mon, 26 Jan 2026 16:03:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 111 x 101, 8-bit/color RGBA, non-interlaced","md5":"5025c85c1772aadbb3e53f953913d3bc","sha1":"fb7fb9939693929455b21cabd3f99b7b4761d39a","sha256":"124aeafaabb57da5126971cd6c763b317cde9003ff1690e447a494952f156139","sha512":"4e22762c206947be1e8757db4c14cfd0cf6fd70f6edbc40bd2a4e6fa9b1a7ee151e17135b39e6bb4df9161e173ed7207e463072d9ffff0fa415005bef0e77334","ssdeep":"","tlshash":"67511b9de451bda064c9ebe428fa8593c9238dc01beaf55ce98c59539c712f0604b6d3","first_seen":"2023-05-02T12:59:34Z","last_seen":"2026-04-18T09:31:25.61265Z","times_seen":1376,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getPksLongDragonCount.do?date=\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:54.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getPksLongDragonCount.do?date=\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":633,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"07200ee39db1f3b87b33ab7fdba8d897","sha1":"00bd048620510c97a963af3d5bb012ff173e50e8","sha256":"a50663162d34e55daf37ccbe6a39dd7ab9b203b31e42c44ce7a95117dfaa306d","sha512":"60f9272b1f0e329b8ddd13dcf69d5171a4ec4928cc018535fcd3dc0f58d08b4aa82984f378763e8a85c68333ed817e8ba909c25ab2e00ec5f2bde3fb1d8ae185","ssdeep":"","tlshash":"08f03a7ab515341f6ec91f99f4ebf275a0d012618e4c8bd1c1fd18322718a0db16fe90","first_seen":"2025-12-27T16:04:42.403751Z","last_seen":"2025-12-27T16:04:42.403751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sitesearch360.com/v14/sitesearch360-v14.min.js","fqdn":"cdn.sitesearch360.com","domain":"sitesearch360.com","tld":"com"},"ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitesearch360.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 22:17:45 GMT","end":"Wed, 28 Jan 2026 23:17:34 GMT"},"fingerprint":{"sha1":"3B:33:1D:B7:B0:D0:CB:19:43:9F:E0:7A:CF:65:84:8E:1D:82:DB:0E","sha256":"D0:07:30:A8:43:32:2E:70:A1:B3:B4:CC:50:48:E1:C7:B9:A4:07:A9:72:DA:4D:E0:22:D2:C7:51:A4:8A:61:3A"}}},"request":{"raw":"GET /v14/sitesearch360-v14.min.js HTTP/1.1\r\nHost: cdn.sitesearch360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b4a0ce40b3d56be-OSL\r\nlast-modified: Wed, 06 Aug 2025 12:55:41 GMT\r\netag: \"54583-63bb1dbb3c607-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 217609\r\nexpires: Tue, 27 Jan 2026 16:03:51 GMT\r\ncache-control: public, max-age=2678400\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345475,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65432), with no line terminators","md5":"021e55da7c3c18ad2ad0075756a74437","sha1":"c0cbafc1ffc702466eba506bc7389bdf855d2f6b","sha256":"3662cdd25882ca849ea513c2b0b0b9ec3cb56385761c0c6dfd7d12aa1ec055be","sha512":"961af4534dd3d7984d1464c98883000590be37afe19acbb9c4ab836d36d9be63fdfe87341a6b51d9f7315f68572fe9436499b473e122e20630828f038e3f7f97","ssdeep":"3072:2Ih8Ptz+2QE7iORrP9cUiwg4YZ7A+6T1JFhNYH1g79+Sbe9RiqIQHAL2:2+ory09cUibBZ7AxVk1gJ+se9BHAL2","tlshash":"f7740ad8f16230b112a752e2d06f270972367d38780a9994f57ee4d41cbce8a526bf3d","first_seen":"2025-08-07T08:34:43.414347Z","last_seen":"2026-04-18T22:01:51.034872Z","times_seen":175,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":45,"dns":23,"connect":1,"send":0,"wait":20,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/all.min.css","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/all.min.css HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 17:49:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"686d5a1e-34c6a\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216170,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57680), with CRLF line terminators","md5":"c3e4a5c477f4c3d0e3de95f66da9eb9e","sha1":"37dcd2369977040b6a647b349d9170982a20e942","sha256":"5c4a56908a7b28d815f040556e716de163aaa5e3b1cd3c813c3a216f008a20f8","sha512":"401d3e1b31f96bb3cba813ec3f6772088305575ee8c349f05760a8caeca922defbf3f4b247e63904a350a325347a3fc86c0da8e349e5ad78d373ec3fbcef1caa","ssdeep":"1536:6M1MvMaMfMRQCAn21g+Pf+FEPyT004rPXm7eSldY6s6Fdl58is9F0466Bp66hVf5:x4jsTP4Tm7NUsl6PfTWiAIG9A191j","tlshash":"d2240a027c84119bb9164dbb38857fb865f6d7149a9400b9b870dd473eb18adb08fbb3","first_seen":"2025-12-27T16:04:42.405048Z","last_seen":"2025-12-27T16:04:42.405048Z","times_seen":1,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/77023_social_400x400-2189848077.jpg","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/77023_social_400x400-2189848077.jpg HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:01:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78cd-20b4c\"\r\nexpires: Mon, 26 Jan 2026 16:03:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133964,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=16, height=2160, bps=206, compression=none, PhotometricInterpretation=RGB, description=Physiotherapy, tablet and shoulder pain with people in clinic for rehabilitation, healthcare or consulting. Support, medical an, orientation=upper-left, width=4096], baseline, precision 8, 400x400, components 3","md5":"d9cf4647bfebb87bbe79c16cc9176a32","sha1":"0d5c150d80199cadd3bb290d2a2e4bb2ce5b83b0","sha256":"b0a572df411cc044287319d3b9a2765f6a53595755200063d412825212e6fb4a","sha512":"49a2f10a44b08507cc94c971a7ca29dadd8639f568ca563b0297998fac6f5e23aee7230140d02bf77a2c861001da9b643ab2151a24953e01e22aac0ecce136d2","ssdeep":"3072:lkp/ybIogCiSTU7HW/aT3ZoKQoW9aiqYjEs+32uVi:lkMbIoTiSTUuawnTIhmb","tlshash":"41d3123fbb02f916f1d482bd5c52e3deb366ae2c98b31552f61d5a14af282d0dc4c445","first_seen":"2025-12-27T16:04:42.406452Z","last_seen":"2025-12-27T16:04:42.406452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"43.174.229.25","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":"广州有啦网络科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 04:08:22 GMT","end":"Sun, 19 Apr 2026 04:08:21 GMT"},"fingerprint":{"sha1":"AE:CB:32:71:EE:EE:E6:72:A4:88:B2:9F:4F:C4:E5:B5:A8:C2:73:6C","sha256":"7C:F1:09:2F:6A:8C:5B:F8:63:DF:D3:32:B0:F3:F8:E7:01:29:0E:F2:55:8B:4F:6C:58:55:8E:44:E9:EC:15:F4"}}},"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Length: 518\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 210 No Reason Phrase\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.pacetonet.com\r\naccess-control-allow-credentials: true\r\nserver: TencentEdgeOne\r\ncontent-length: 0\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\neo-log-uuid: 4019461811528560455\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"210","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sitesearch360.com/v14/ss360-styles-v14.chunk.8afa7fc4ce44fc8d4319.js","fqdn":"cdn.sitesearch360.com","domain":"sitesearch360.com","tld":"com"},"ip":{"addr":"104.18.9.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitesearch360.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 22:17:45 GMT","end":"Wed, 28 Jan 2026 23:17:34 GMT"},"fingerprint":{"sha1":"3B:33:1D:B7:B0:D0:CB:19:43:9F:E0:7A:CF:65:84:8E:1D:82:DB:0E","sha256":"D0:07:30:A8:43:32:2E:70:A1:B3:B4:CC:50:48:E1:C7:B9:A4:07:A9:72:DA:4D:E0:22:D2:C7:51:A4:8A:61:3A"}}},"request":{"raw":"GET /v14/ss360-styles-v14.chunk.8afa7fc4ce44fc8d4319.js HTTP/1.1\r\nHost: cdn.sitesearch360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11961\r\ncf-ray: 9b4a0ce4e807b1b8-OSL\r\nlast-modified: Wed, 06 Aug 2025 12:55:44 GMT\r\netag: \"e36f-63bb1dbe03508-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nexpires: Sun, 27 Dec 2026 16:03:51 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58223,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58145)","md5":"008039357e2aa428f45d365409e24bdb","sha1":"41ec4bd924da92c05ca77f22b2ab475f5ee6234d","sha256":"f845561c9619e20d0514a0fb5bc4b4e12b5edca0460c822ea1f34996084fc7c6","sha512":"deb2a19c1514f17ae40a61c4802a5b278ee7d4c6ef64f84f11ee6d2810eb3c09aaa71b2a854268f76de1a264f318c1674f9d12734c58935041ea341f139fba89","ssdeep":"384:8jXxEUGLmiQ2z3emDySe2O8zA/6yV4q8I1WH3EuepKhiyttjd4:cPGiy0QO887VE1XEMUy/S","tlshash":"494385f127a12629602b43e7f6d3295c312ccc23f76367dbf569a4288d8d3d51b6e428","first_seen":"2024-09-24T21:52:40Z","last_seen":"2026-04-18T22:01:51.089481Z","times_seen":241,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":25,"dns":2,"connect":1,"send":0,"wait":66,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car10.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car10.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-7f4f\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 207 x 64, 8-bit/color RGBA, non-interlaced","md5":"a8eefdfd71de9506134d1f8d4c74e963","sha1":"9d8c0864bc8f7d98a053b77bb7a2df6114d5d985","sha256":"d1f15bde0bc236f68215223a94c3a0198afb9f813c27bb1c1396f7771e5de767","sha512":"b4649fb717f46c072fd9c1b95ccc27ac87be1315e874b2506df9b3e61b94a244e0584fc90a60854a177be389b5218840f9cd1e06e67b2d89bf5488b0c0ee9c1d","ssdeep":"768:rt8yFfvY4Iy17EBr/x3ZHvVc+VIL4LCZMfv:rDvbbA+kIkffv","tlshash":"dde2cf199da3f5f4980852303fe9508dac86ae8344699c52be9c8d187f20bd8dc5f2a7","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.456417Z","times_seen":536,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getPksDoubleCount.do?date=\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:53.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getPksDoubleCount.do?date=\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1489,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9c6b6d51b2612513cf8018b4b9319520","sha1":"9b7d6abf13023f059cfbb87e00266353cd554da1","sha256":"51cf875dd2cd226461ccb275c2094bac75718e5026745c7ab0a67d9a97bae2c9","sha512":"9cfe819a29ae775b59bcd4ae4892242b7375ab39a5d329ed580d20defac737e2406636c51db044c7feb834f4f719e01316cedff19f76c097a5ff73eed81b0f1f","ssdeep":"","tlshash":"2d31f486fbdc2561fd5b2332fddc647045fb26025ca90b200ac7ca58508c817ee08945","first_seen":"2025-12-27T16:04:42.408882Z","last_seen":"2025-12-27T16:04:42.408882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-27T16:03:48.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 15 Dec 2025 00:40:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"693f5911-e17f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":57727,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (848)","md5":"c7daad57b6c856e695d360f5f40440aa","sha1":"fcda12a49a6c68d3acd3c3df74f17d41bd76b4b6","sha256":"423cb4403458148729cd1a86dfa5bd8c2a18bb734d5aeb24189fe4dd3942c4d3","sha512":"5a0480ea4b2ad2b9776c6bbc728210637dd6e774d7eec2ebd85344ce2721e80830b6892c6588e3d4a261717e7c1322297fcc601001e92eab76ec3db45585d8ca","ssdeep":"768:D2FbaNWlCpXuPjkh0fCpw8VNaTgd1H8MDcslaOIiEN:DpWlYqjXCpw8V/EcsOIiEN","tlshash":"1843622191dc493b012342c262657b8e76af8e33d9278462f1ff4b955fd3e86dc1b06a","first_seen":"2025-12-27T16:04:42.409637Z","last_seen":"2025-12-27T16:04:42.409637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":619,"dns":182,"connect":214,"send":0,"wait":214,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/summa.project.common.min1137.css?d=20250917","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/summa.project.common.min1137.css?d=20250917 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Aug 2025 12:11:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a85e65-bbb3\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (47993)","md5":"2d0db65537c9943fda2eb1c7861a41e3","sha1":"3989389546716b3395273caf026a981582de9f23","sha256":"86d455b3fd7fabd303c59159d6ff0b2c22b534bdcf9893ef4528d8d632118408","sha512":"ccc4ee869ee36842eb1232e084ecd7b9ff7c011b6f641c289cb7824727722d9a5f5064e4b7fa59a7119fe12256393c643c6bd4c4d018199a30ce82dcab036637","ssdeep":"384:ulepHmCwviiGWRybYYD9l+k+Bs9P11286NvGqa9HdW0IWG/vSBu79iOsexdVqRd:cevWRAwfm9bdWNaPjexdV4d","tlshash":"f123ff626588521af3b3835ca06d7b46f9fe72c1d124d6f9e02fe0d983472d6122fb16","first_seen":"2025-12-27T16:04:42.410525Z","last_seen":"2025-12-27T16:04:42.410525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/summa.project.summahealth.website.min1137.js?d=20250917","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/summa.project.summahealth.website.min1137.js?d=20250917 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 22 Aug 2025 12:11:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a85e61-f7c8\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63365)","md5":"b73ea09578688d8a0e3e9c3457429f03","sha1":"ce88f3cebbe66a88db4af380e15ff973fab813fa","sha256":"ace207beeae8bdf4cf81583b2946e00d55dd391da42deb826cbd0b29c00c1f19","sha512":"aa0e6a0f0bf3a366dde7656e4e784220b95345400f037c047f12731c37a87e6ef83f0aab5bc43110a9232d298576d4e620a3374b8bc3abc2112716d2bae7d4db","ssdeep":"1536:jEm8PrQiJq0ZwqYNg4r9lPRqi15Mz/cOXz98f:4m8PrQiJq0Zw7Ng4r9lPciLMz/cE98f","tlshash":"c453821cf118b1a723ab36ba652f6a0733737829da0545507165adfa0ebce1c2713f2d","first_seen":"2025-12-27T16:04:42.411375Z","last_seen":"2025-12-27T16:04:42.411375Z","times_seen":1,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/css/listHtml.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/css/listHtml.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Feb 2025 15:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4c4-8624\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34340,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (34316), with no line terminators","md5":"9c6038ae0d2f46997ea6171df77f598f","sha1":"07db9052233146d321a89a6fae189c60265e82ee","sha256":"9e7e09c2601073ef8ded916184724483aed355e1bcaafa3bdc2454d812504b2e","sha512":"ce7e1107eca1308a20c52544c6fe227d52c2159293c3950618de369bb8c0850ebd1cc747ff554083a487b06c357451ae08ce73d5e7fcc2709b1e111cdddcc3dc","ssdeep":"384:cHjCKwnBiP99aHw35SfjVMaivIJ8DgF/iB3E1WuNlgK:cHjCe9aNVNivFDdE1WuNlgK","tlshash":"99f273397664374da0ffd1237aa07fcc2860d4c4c55b43b4ce6b3f61662b2622ba6395","first_seen":"2025-04-07T08:33:42.718176Z","last_seen":"2026-04-18T09:31:25.696731Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/zepto.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/zepto.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca8-66a1\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26273,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26273), with no line terminators","md5":"6bea8158383f3034319b45571f5ca7e8","sha1":"c546d9454a2e62ed987b0ff459a13bc41a51b250","sha256":"bdcd35a7fc89302612325490543bab6f0f74e46830e1a646c0d434c22bd6d476","sha512":"191e508e15bc12a02773dd14bb4767d59e953360c581532d5a330910b9bc089cbed1225c4e941a28aa2a153e9e871e2a85d38fc69fa76a18faa1012899d0e455","ssdeep":"384:/qbM6OHYNwcyn24wmZucAQfSHRZpB3sEfH/CMtYPM:6YYNwLgvbpB3HfaMz","tlshash":"2fc261ccb2c6b46247a771b8506f610bf23b6889380e4454f169e8d5bc7890e957bf7c","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.528202Z","times_seen":1135,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/png/badge_ios.png","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /png/badge_ios.png HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 Aug 2025 14:28:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a72d00-200c\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 80, 8-bit/color RGBA, non-interlaced","md5":"aacd4dd04fc0967c221de9fe9e95d44d","sha1":"bd09251100bc862f0d87fd838fdbaee92b6cdee8","sha256":"dbc6cdc7d3661e09c3cca585daa22e7dba7611c8531dea1739db082ed9e4feee","sha512":"d2c3ce17f0398b89e856aaf861eee05778aac75e6dfe7e3f33aeba1eed4131ae5a06dd5fca8f773ae2557e2c7c67edd230e6bcbe3328d4b7dbfbb76a37f4238f","ssdeep":"192:OaRRWZo0C3FPLzSfpEdAHJfU6v57xjBlHl8Me7M3:OpZohFP3iDHlfZeQ3","tlshash":"6002b021c689de1f91a995f74ada0524e8f1106ec087fa75e81dfda84f743825055f0f","first_seen":"2025-11-23T10:22:06.091078Z","last_seen":"2025-12-27T16:04:42.413302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/css/public.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/css/public.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Feb 2025 15:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4c4-59ac\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22956,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7c54605cb3f71748fb879ee8e6b705ee","sha1":"f8c8be00cc570ee35564f543357034e6addd2500","sha256":"5256fc07502ba8b4af3949b231c9bece358850eb090c6c547e187ef423527f78","sha512":"a86d4d412d17e3be85097a53b5074e38a65900299ca40a7fc38a62fedf0c923d536a07974be98aabee1c71ab3560b05415c8f0e56813133182650b7bccd7db6f","ssdeep":"192:iSICtkWbE2ofggVdomdEP7WaGvuHRVrhF3hng65t71xTFq9YXRHecX6oEg8JYWYp:iSIyxh1r1eo","tlshash":"b4a2ca342cad28c9b11f96ac3d7a7bda4a1c8044de0f4e6cf1bb7db5b7492504272ac5","first_seen":"2023-04-07T04:13:03Z","last_seen":"2026-04-18T09:31:25.458864Z","times_seen":1363,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/local/tools/tools.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/local/tools/tools.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456cb0-19436\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103478,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (924), with CRLF line terminators","md5":"70327931ff11afadac61c0a94f15db9f","sha1":"d9965d83246ff2c64cd7750f53ed79a5b4a617b5","sha256":"7f25ed8e478477aa7864c3e50716f44384a306b1a55dd27508b1b64f603a8f93","sha512":"eecad4b4cd95ceb29e17a2eced1b53acb00a00b6ecaeb45a6b409a8e2c40a35861e7e0cbf388a4ebbf2be4228a31fcf579b09c3ea4298d61400e90d8bcd54f2a","ssdeep":"768:YhY+GyBfYY65VS27+8cVI+4T1NNa+Na0NaOqBaA32imH52FpJ8M/Q5tQ5deNj2NV:KtGWfYBVS27+8cVI+Yjvzqsni08o079","tlshash":"29a3a61a99702a5a417373b5593fe500f4214f3b01078846bc7ed6f85fb9a62a378fe8","first_seen":"2025-09-10T11:21:24.626443Z","last_seen":"2026-03-23T22:32:04.49711Z","times_seen":83,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/xingyft_video/images/logo.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/xingyft_video/images/logo.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/css/public.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4f0-2ccb\"\r\nexpires: Mon, 26 Jan 2026 16:03:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 57, 8-bit/color RGBA, non-interlaced","md5":"f37b1a022db713126171b33ec2eb8fae","sha1":"cedda267ce4360cbcf9b83d1bc735a5345a069e1","sha256":"31988b8715f65df7033850cc6277fb4bfbefd10fe73100f112e31bef0405f04e","sha512":"93248514055b826a0da69d9211bbf1183168b40c6b2e649b3729cc79c7e350f126eaa50f5fa2253ef17b6fb7bc149aa315efa706934766d13476dea3ffa4512e","ssdeep":"192:LXTF03uCKq1BZchCA0WdIC+foXxevzx2oBi6wJf0UNcD7iCVMR3:LwuLq17cc6ICXhet2W2tCrqJ","tlshash":"0c32c0baf05e2dd1e1b8f03205dad082f80d16d8b540b235e6cf4617335a1f6caea1a6","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.542015Z","times_seen":533,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/html/public/footer.html","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/html/public/footer.html HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 190\r\nlast-modified: Fri, 19 Dec 2025 15:17:58 GMT\r\netag: \"69456ca6-be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190,"size_decoded":0,"mime_type":"text/html","magic":"exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"c882b39b6e31742e243bb5ec79c861b1","sha1":"bc05bb7d0c83452c9fe3d0721c7fc4fa0fc3ad24","sha256":"03ac79b6c2a690a93c0f5671b60906caff42a69d924bacbc5e5a1802100de7ca","sha512":"89fd0d595ae7628881f4f9d59868fb292d26f9d100ecb8923208a38ae78d19d8039834f93eeeae19e5bd49045f8eb6754c8a6b3ec9e929ab29aa34ab83299811","ssdeep":"","tlshash":"d6c022a2b0049aba09930143413223889993ca81a352d921a38003330253513980a042","first_seen":"2025-12-18T00:22:10.501162Z","last_seen":"2026-02-19T01:39:41.225835Z","times_seen":48,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:53.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Dec 2025 16:03:53 GMT\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1be305145d51ecbeb52ba67f2208dea9","sha1":"6f97fc00e9d6771004cb17d53c7ff7d62011e78e","sha256":"5fb68a19bfedc1331144c73515b5cc021af26ac8605c62e73a31771a0e19ee62","sha512":"b3a73238231bbeeaf01907f0e3a78d4221d24b50de71345c66a6d6a4ff6afb5fd8d88b242a57ba35d37f0466edc6d3a19c7e02dfd4563d2ee565ca2cc06182c6","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8ONEhYO3RrxGx:8KYXuM1+4","tlshash":"dd227792002ba400ab971dc233cf7f3aaece10896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:25:11.707221Z","last_seen":"2026-04-18T18:16:20.298742Z","times_seen":3431,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:04:01.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.pacetonet.com/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 855\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":855,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20250915\",null,null,[4,0]]],1871,[[\"1766851431956\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"zh-TW\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"534B03D5-0D56-4043-BDC9-198B2E595AED\\\"]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1766851441957\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.pacetonet.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sat, 27 Dec 2025 16:04:01 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-04-19T03:27:36.379315Z","times_seen":495310,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getPksDoubleCount.do?date=\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:04:02.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getPksDoubleCount.do?date=\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:04:02 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1489,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"1936c1d539a4ef20c907360d1ca98708","sha1":"d354f112a2d2c6606bf8ef2f1c17efd0050dd8a3","sha256":"a626fa6638a9f79febc6dea06cd45140f1291a10d54803389b7566a9bddd10f4","sha512":"6baf75248d08e98038148f79abed3986bc3275b70b83ccbf0a13cc14bf3dd93d3d762a434993f8f2411d335167ea79657617d696c2a2eed8d1603ad306230efb","ssdeep":"","tlshash":"2c31f686fbdc2561f9572332f99c547085fb26075cf60b200ac7ca14818c817ee08945","first_seen":"2025-12-27T16:04:42.417222Z","last_seen":"2025-12-27T16:04:42.417222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/wheel.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/wheel.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-b22c\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 309 x 89, 8-bit/color RGBA, non-interlaced","md5":"3f405b4d22bcc882167370d097ba18c6","sha1":"99056100adc2ef376061b7c1845b5d1fbf2431fa","sha256":"6ab5abe94c4fc14fa4d84fbda6a6d1a16b468f1f5ce595a305d31185c5051d09","sha512":"7f3ee05b0c53f1656d2fad3705ed448fcb8be93d14e697209c1d01af0e6f70b372404cc0509e649021d14c1ec3501132ea8284b92d3a76f9846e5560869eaadd","ssdeep":"768:qtd8YI7Nvwo0gzc7OM8CYHRYWVWOsqIMUKDx+bXzI:qUYI3fc7f89OWV3ldkXc","tlshash":"5923d0a598a4746151bbf93c8dd72a0489ca0b8381518dd5f3cc4c2baf4bf788c9b367","first_seen":"2023-05-20T19:29:41Z","last_seen":"2026-04-18T09:31:25.639509Z","times_seen":535,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/evalx/6370f9ed4a3eff10dc46a2a1/contexts/eyJraW5kIjoidXNlciIsImtleSI6IldJREdFVF9DTElFTlRfS0VZIiwiYW5vbnltb3VzIjp0cnVlfQ","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.1.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:53.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"OPTIONS /sdk/evalx/6370f9ed4a3eff10dc46a2a1/contexts/eyJraW5kIjoidXNlciIsImtleSI6IldJREdFVF9DTElFTlRfS0VZIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper\r\nReferer: https://www.pacetonet.com/\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\nallow: GET, OPTIONS, HEAD\r\ncontent-encoding: gzip\r\nld-region: us-east-1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1766851434.001341,VS0,VE1\r\nvary: Accept-Encoding\r\nage: 0\r\ncontent-length: 23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":58,"dns":26,"connect":16,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/cookieyes-fixe7e9.js?cache=20250829","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/cookieyes-fixe7e9.js?cache=20250829 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 790\r\nlast-modified: Wed, 27 Aug 2025 16:04:15 GMT\r\netag: \"68af2c7f-316\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"260063cf7ad7aa5710a8d19f98a3fad7","sha1":"1cedc9adfa56c552ed9b433d4794fad04feccd92","sha256":"6db47121349d133e7b15fd33cf81cee184377cdfbc7a8ac44208a8fec7395e21","sha512":"a927d49cea353608143ae24f3ba296d28888057263156ca44a732d30bd1ee183aaf2d343a1880aafef58c7d3cbcf4e4a92d3b2e00adf31429ada5c7e692eb9d5","ssdeep":"","tlshash":"f501d019196ec539803a76f89aaac52ef47810179010c89e788cd5304f71d65cc4acfd","first_seen":"2025-12-27T16:04:42.418542Z","last_seen":"2025-12-27T16:04:42.418542Z","times_seen":1,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/swap.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/swap.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Sep 2025 09:01:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78e1-1f06c\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32763)","md5":"dabdd45a787359e4ae2eb3ba57ee7430","sha1":"671eb3e2ef5a39f7b39053269eec7db43ae0ec8d","sha256":"1253135b02ddb8391ab1428a3efff3e4ebe0aaef0062f9007b9c654e6ff110fd","sha512":"c9f6a8b707c088104a126a046ee78154562cfe1e494bf230387ed0353fa37508cffbd11a7d64d25942c0336400859297e935595cac064ad07ebe02d5a9fea8e4","ssdeep":"1536:zrrKbzCumjTKWQHldIysIuFmZ1rVMT1j4N17Le1x1G111DjQ1+2OWPYm1m1rGv2b:XrKb1mjTKxHlu50y5k1","tlshash":"a0c3d9825e88647a4d6dfb11b03a778e9f7a0462f0a0bcaad7f844e447d3d8d6611d0f","first_seen":"2025-12-27T16:04:42.41942Z","last_seen":"2025-12-27T16:04:42.41942Z","times_seen":1,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.rudderlabs.com/index.htmlv3index.htmlmodernindex.htmlrsa.min.html","fqdn":"cdn.rudderlabs.com","domain":"rudderlabs.com","tld":"com"},"ip":{"addr":"52.84.50.106","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rudderlabs.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Tue, 12 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"97:A1:23:35:B6:2B:D3:BB:FB:9E:94:CC:C9:64:66:94:05:8C:B1:49","sha256":"8F:12:74:FA:77:74:8F:B3:87:9C:34:FE:FA:D5:51:C0:5E:8C:86:59:0E:29:4D:B6:62:5D:EA:6A:69:B0:08:EC"}}},"request":{"raw":"GET /index.htmlv3index.htmlmodernindex.htmlrsa.min.html HTTP/1.1\r\nHost: cdn.rudderlabs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/xml\r\nserver: AmazonS3\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: jKLW_wO5bYKN0IL9Pfp7RCXNL4_sWtStlRtBfj3mrFZ4Wtm0J07QeQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":73,"dns":66,"connect":1,"send":0,"wait":332,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/drawLines.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/drawLines.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca8-613b\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24891), with no line terminators","md5":"7db0502baf867aa0663475b899ffb19e","sha1":"a69f4ef6ab52c62d9885dc55b733c8c37687383e","sha256":"8a3eec9c6525ce4aad8b37e0a188f4716a8fcdec24ee894d2f8ffec447872fbb","sha512":"68964174935137b93491d1bea5e3fec05f068dabd36cf5670bb03c6c4eb30bdfbc493b8002eb8d1e46d7289f9c8430d25d230e1e6870d89fe53cf0f7be78794b","ssdeep":"768:uVYu93uZgDPN6cypp08tc25yBY/BEMXH7YE7cpv:u19MgDl6NppjtDwBY/BEUH7Yecpv","tlshash":"18b208eaf2863475818b63a9143f6749f13368156e06844cf479d8d26d38f8970bfe78","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.688465Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car9.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car9.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-7a34\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 197 x 61, 8-bit/color RGBA, non-interlaced","md5":"58d6c254c02fc720fb1f4b43b4326bb7","sha1":"b0ee112578fd0c62d5c5286803d05bf4c46c8baa","sha256":"2f915f3950368b31c1cdb04b3201d3a26b341aa5121e9ee0b90be11509be8829","sha512":"3325e41c633de159a936625d8ccfa6714fa78f61e37ef8bce3fdd8b8b3ec9668f930c58904a72cdeda6dc7bdb4ab9017ee08a61398ec5deda9bd4054b51dfbb1","ssdeep":"384:3stA5BLVWc/oVhxsoKTtXB4xnIjFTIiGcYy5yKpb2uecjw2v78Kk:8tj82441IjFEiyKpbJT/gN","tlshash":"eee2bf315af3b860e69da9323de52df8892506634c918c44be8cec1f1f10ba65dcbe47","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.681549Z","times_seen":536,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/main.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/js/main.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456caa-2dac\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11692,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11676), with no line terminators","md5":"f302a0daffe3bc5adc5823ad93baf448","sha1":"80f116f8599e53cf64783a7edf1b37c0675ff49d","sha256":"4e4474d2244a3a8561ab907a12d9ffd3a9e79ab5786e77f63b17302b88773cba","sha512":"a5c588e928502016527b2d8e6f2efa1d1ff7cec958873fcdff91c46cf40a795524228f1c0225cb8086bb313c49d8c405f9ba3aa559b460d8025d898691cc12fa","ssdeep":"192:ouagaGRel3scAHWCbIzus1AUoJJM629svHFBeNEhLQxLrk4fcDx4xWFWNHyk+D8N:ouagaGRel3scAHWCbIzus1AUoJJM622I","tlshash":"423265fffba6262546e677f3159d7b5714b0b6169c034a07980c489caa39fc2201fe5c","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.651465Z","times_seen":538,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bd51static.com/21jo.js","fqdn":"bd51static.com","domain":"bd51static.com","tld":"com"},"ip":{"addr":"35.215.189.171","port":443,"asn":15169,"as":"GOOGLE","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bd51static.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 13:05:50 GMT","end":"Wed, 04 Feb 2026 13:05:49 GMT"},"fingerprint":{"sha1":"3C:31:89:59:2B:8B:DC:5A:BD:79:65:FE:36:1A:BF:1B:A9:F7:72:6F","sha256":"62:C7:46:9F:BA:17:FC:8C:42:17:EC:1F:35:D7:AB:51:06:B4:0A:6F:B4:0B:B2:B1:FE:8D:31:EA:B2:A3:17:CA"}}},"request":{"raw":"GET /21jo.js HTTP/1.1\r\nHost: bd51static.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 May 2025 07:20:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681b09b6-555\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"faca0dae2a2ae726125e56ff2541e6d0","sha1":"396c523991e13fc97cc85b9e0dc9d6c81eca62da","sha256":"ff71c5e0a07ab31facf2842c405f1d64b09b87e7e6d768cabe6c276737deb4d7","sha512":"ab3f13dd6dd796602d9b6ac4d5fa6710053b708f84c0c0067d7b926d6c0d6413599268672ecd2dfaefa226a651b110cf2d3b3d8947010d2a463ed4ee5894f20f","ssdeep":"","tlshash":"f621ee9f7c05e2246b96383a33bbdd9ce9ae0025101dd80294eec4ad7d29ff84526b4c","first_seen":"2025-09-10T11:21:24.605613Z","last_seen":"2026-04-19T03:20:30.90504Z","times_seen":125,"resource_available":true,"data":null}},"time_used":1102,"timings":{"blocked":410,"dns":20,"connect":221,"send":0,"wait":222,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.callrail.com/group/732226907/f1519ee45ab15a26a99f9b63/12/swap_session.json","fqdn":"js.callrail.com","domain":"callrail.com","tld":"com"},"ip":{"addr":"52.84.50.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swappy.callrail.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 11 May 2025 00:00:00 GMT","end":"Tue, 09 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A4:F6:DE:49:47:4F:F0:04:80:30:A2:C8:D1:D6:2A:97:08:03:F2:59","sha256":"70:E3:BA:86:64:AF:60:38:89:DA:28:95:40:62:EE:B3:BF:14:80:4F:85:36:28:9A:48:00:5E:3C:0A:75:9D:68"}}},"request":{"raw":"POST /group/732226907/f1519ee45ab15a26a99f9b63/12/swap_session.json HTTP/1.1\r\nHost: js.callrail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 682\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":682,"data":"{\"cid\":null,\"uuid\":\"aed4644a-3d18-470e-8334-afdb8d7623f0\",\"ref\":\"direct\",\"landing\":\"https://www.pacetonet.com/\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"record_pageview\":true,\"swaps\":[\"1980663078=\",\"2348677965=\",\"3303753000=\"],\"all_formats\":true,\"google_content_cookies\":\"\",\"ga\":null,\"utma\":null,\"utmb\":null,\"utmc\":null,\"utmv\":null,\"utmx\":null,\"utmz\":null,\"GoogleAnalytics4__ga\":null,\"GoogleAnalytics4___utma\":null,\"GoogleAnalytics4___utmb\":null,\"GoogleAnalytics4___utmc\":null,\"GoogleAnalytics4___utmv\":null,\"GoogleAnalytics4___utmx\":null,\"GoogleAnalytics4___utmz\":null,\"perf\":{\"dns\":0,\"conn\":0,\"tls\":0,\"wait\":585,\"recv\":213}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 349\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-encoding: gzip\r\netag: W/\"34fa196dea491e66028f0931a27d4652\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding, Origin\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 4bb81987-71af-49d7-98bd-52ecb3c236a1\r\nx-runtime: 0.076108\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 dab692ab133f98758992c9457836e846.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: q06knGwummX009i03rOqKjMJWcEs7E4xbfHB-xZG3Z_ZXv08X0W6pQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ae9b357817b13535120525fa417da5e7","sha1":"a60346810a789f791c0bec607dd9e645111ddbca","sha256":"34fa196dea491e66028f0931a27d4652c087854fe7d4ba43000e138536254422","sha512":"7b3d6f1ff7339c90cf1b0949f3ec135c2d029380d3d55a580c616675e538675ac407077d4602773eae1de1c04e4979e9f4afe2f7b83f876589eea85ac4ae6a6b","ssdeep":"","tlshash":"be213a83041d0dfb1941519266ac763388743d1870d229bea0f89ad4c8d398dbb2edb7","first_seen":"2025-12-27T16:04:42.422525Z","last_seen":"2025-12-27T16:04:42.422525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":54,"dns":40,"connect":1,"send":0,"wait":292,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getLotteryPksInfo.do?issue=20251227132\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:04:00.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getLotteryPksInfo.do?issue=20251227132\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:04:00 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":754,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"3f8de20efe97758484e0b437ed3739fa","sha1":"0dc8ecd274b56e261f754fa6312f711c35708503","sha256":"e39d85a0ec9b7c092549de178b53ab6ba933432eb8ef8840eb018721c6b2ca3c","sha512":"ed62823c0ee70bb82187157ce19d2993ab98c356d97629c3834535bfa50a31df91cc78aa1c9cab4dbb97165cf9a88657e5626877bc6961c1dbfb560cbf11a07c","ssdeep":"","tlshash":"e4019c96a93c7d68bb05a072793ab2d9957567431c9c2ee0d7fecf20418603b2a0ef45","first_seen":"2025-12-27T16:04:42.423293Z","last_seen":"2025-12-27T16:04:42.423293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:04:01.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://www.pacetonet.com/\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://www.pacetonet.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sat, 27 Dec 2025 16:04:01 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/favicon.ico","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nCookie: calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.pacetonet.com%2F; __vtins__Kbu0ae6HwHakHTZk=%7B%22sid%22%3A%20%22577bccd7-1c46-5dcb-a834-96c77784d867%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201766853230868%2C%20%22ct%22%3A%201766851430868%7D; __51uvsct__Kbu0ae6HwHakHTZk=1; __51vcke__Kbu0ae6HwHakHTZk=1ec92c1d-7dda-5ff4-8431-794329d936d3; __51vuft__Kbu0ae6HwHakHTZk=1766851430874; __vtins__Kbu1VAlblxqDdZFw=%7B%22sid%22%3A%20%220c4ca9af-932e-5b31-94ea-1b1a4872fc3b%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201766853230901%2C%20%22ct%22%3A%201766851430901%7D; __51uvsct__Kbu1VAlblxqDdZFw=1; __51vcke__Kbu1VAlblxqDdZFw=9c898e3f-8845-57c6-b952-f8dcc8853e42; __51vuft__Kbu1VAlblxqDdZFw=1766851430904; calltrk_session_id=aed4644a-3d18-470e-8334-afdb8d7623f0; ssi--sessionId=7d134884-e1e9-99ba-09fc-e2281e8056e5; ssi--lastInteraction=1766851431155; nmstat=c0fd1d99-15bc-b1e3-a01a-9ba9c4be0064\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-19T03:25:35.404578Z","times_seen":491059,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/sound/cuttime.mp3","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/sound/cuttime.mp3 HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 39631\r\nlast-modified: Sat, 15 Feb 2025 15:38:14 GMT\r\netag: \"67b0b4e6-9acf\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-39630/39631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39631,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"345e33b7d8d84bcb8b925f34a1996dea","sha1":"94c19367ea4643abb426b6a3cf37943848f4e7d7","sha256":"bbcd59b156951cb11efd0cf0399241dd2539ec33a80deaeed8ea5914073fa3d8","sha512":"4ba970df5ab73959ceb5047bfe827761cd0b190143a73a7a1db8cb33c0378dc6cb338da18fc9ff681d2f611e3396cf1b3e25d22a84aea2ebcefb5436505510bc","ssdeep":"384:DR1AoeHIGKChgnsssbgA2LVOyvzc55LPTun3jUuvuHbIoJ0FAt:DkoQhasssbgA24iIPwrvO7","tlshash":"62036c0b7f83546fd9b73f3e721755a865f0ac5e8420caca94246bc611dd8813ef05aa","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.574378Z","times_seen":537,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/sound/empt.mp3","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/sound/empt.mp3 HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 9559\r\nlast-modified: Sat, 15 Feb 2025 15:38:14 GMT\r\netag: \"67b0b4e6-2557\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-9558/9559\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9559,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains:\n- MPEG ADTS, layer III, v2,  64 kbps, 24 kHz, Stereo","md5":"f6eb0efb39f56ed3c1c937ede5e55297","sha1":"426ce2b1d6e8995cb974f9521c41495e186ee3b9","sha256":"525ec80c5678d55bb1a3b117c9e1dfef7a52d26acb63b001e244eadc3532279f","sha512":"055038d09cf0c4f96130d86cf6fa8933e7fd9aa8c5873f312d8364ec83e3a7e756bdf5ab3b3632caaa879ad9cbffacee21fdf40ba7d5f20cff856761ee84ad24","ssdeep":"24:AcT7777777777777777777777777777777777777777777777O:w","tlshash":"9d1221537b51941ecd17763f3651156d02ca307f0178d1c1905487c4604f0c01d424bd","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.64023Z","times_seen":540,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/bg-bottom.jpg","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/bg-bottom.jpg HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-8254\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33364,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 1266x85, components 3","md5":"d06e0c9fee4713033541bdf45ea00adb","sha1":"a90c90bc3108d83318953887b034c40a53b833d5","sha256":"624d16105d46d209436640d52d031259be97821474f4ef7230e16920153e1e3d","sha512":"0ed3bc12f847bdc8dcab6a55c24660f26a1e56120bfb9ceeefb436a4a6627b66c8acee1e09852fbfd11d637018232988dbf7d7311de21eb8ef1497a933b9a5ed","ssdeep":"384:KPUSz5UNEON6zaF2sdCzahBuoo3EN8Od6zaFGqSiNcOG6zaFGQ3yR/iJHO:zSz5+N6zLlAuoo3Wd6zLqSyG6zLQ30p","tlshash":"12e2f91e47c2b0d0dac952b0e406151607ea47afb58dec8238dc0d1eaf92f997f4e4ac","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.461479Z","times_seen":533,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallbackef50-3.jpg?la=en\u0026h=600\u0026w=800\u0026hash=856B3B856DB917B3C4E217546A99AEFF","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallbackef50-3.jpg?la=en\u0026h=600\u0026w=800\u0026hash=856B3B856DB917B3C4E217546A99AEFF HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:01:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78d1-1afd6\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=© 2023 Dustin Franz], baseline, precision 8, 800x600, components 3","md5":"a0578f33044f87482a641c4140e1bf69","sha1":"067ae23e102202c3b7a022f50541081f4a5a1278","sha256":"f2669a5e2d3a7984d3c94867395b8ef0bb098d826bd89dc34a511ff78b96c660","sha512":"97c2b3c988b46db0ccafb9c925e168c583da8ea969b993f4dcd45faf635ddefdec95d0869d8cab1c0e4fd461a858c61260ffd276b5700c633eced26497c2f143","ssdeep":"3072:IT2THmtxBMwVpihmfatjwbofKHaNzlLFGvqjf1T:rGbiwVimfECShFGyjJ","tlshash":"b6b31232cad42b984dae3f68056ee536ac67f505f6c640af5c891207fe14787ec06c87","first_seen":"2025-12-27T16:04:42.426199Z","last_seen":"2025-12-27T16:04:42.426199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/css/style.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/css/style.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Feb 2025 15:38:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e2-21df\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8671,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"8498a190ff0d583e250f3a8370f3e4bf","sha1":"e7e6df1902f586e6cd2a9679cd8a641662077402","sha256":"8cfd9f73dfbf008fd4a8f425d1f7f0a4089e9d79fb102583f806c282fe80111b","sha512":"4a70a799a2f714d1f2bea20d63a1bf4f7eb63700976ea02b1d952447f502b9ef15be6eb320a914f0ee5796e7e39a2c7ec521eef368bc5ce801f56818157b5f1d","ssdeep":"192:2fxHwmmQTATp1VA04LZnNOpCIAcATvIezAcUihr3:2fN81VPmZncAcRMAcUihr3","tlshash":"550287b31a263705f91fe2e46da8a786c52f5087bd5f1e1b388e794cc3856d80127a8d","first_seen":"2025-05-25T12:44:27.137487Z","last_seen":"2026-04-18T09:31:25.448306Z","times_seen":500,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/summa.project.summahealth.website.min1137.css?d=20250917","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/summa.project.summahealth.website.min1137.css?d=20250917 HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Aug 2025 12:11:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a85e69-2edcf\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191951,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65525), with no line terminators","md5":"3720fb1312f171bfcb7c4e519e2eb5e1","sha1":"3d46615ddc28695c3ab1bcaeba4f492a915e4bed","sha256":"f00be64e9da58fa7ae27d1b73c69e4e82be44bd749074d33b388ef68c37f4dc0","sha512":"3c073d3c0ad47c2624146eb6fbeee12940cf5913b8f72a4e3e8465f11e7aa26399b60cd3008442c35aef8b974f2971d006bdefbf75361535d9359b2d730629f2","ssdeep":"768:f52t8QqxFuddb3olXrRltrYydK12/+GSMOAUHrzme3EBpf4:f52t8vuXwXrRltrYyda2/AAUHrzSf4","tlshash":"8414231ba64c512f63138b58ab68bdd77b766030c53bc9f9b127acb48a8f14e061f705","first_seen":"2025-12-27T16:04:42.427884Z","last_seen":"2025-12-27T16:04:42.427884Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/jquery.validate.min.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/jquery.validate.min.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 31 Mar 2025 14:46:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab8-6c01\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27507), with CRLF line terminators","md5":"e3578aa2102f92faf3c4bb607cdb276f","sha1":"07694d89bfd65013b63febaf2becddb9553826e4","sha256":"60c0c13aa97b486e15853e09c1fa194fef8d2223279a3bab9e660f3d84341d29","sha512":"7ff61b921ef69d6a707eeab6485ecc946411388d0adb0ad28494e70f0f808427ef20ae8a9b8cc5f850aa7fb34cbb8bf19c891a51f0da47e100922620ce80faf2","ssdeep":"768:f5PAkQNl/jHWgb1v7d+jiE9o2tOmS7/kJyM3bMLSQAZUr2:fik+/DWu1v7d+jiE478JyMTQAC2","tlshash":"9ec2874973e5201a8e8770f1dc8fcd46b1b54a249195a8ac799cd0d099a0dfc86faffc","first_seen":"2023-10-04T23:35:47Z","last_seen":"2026-04-17T09:12:25.913377Z","times_seen":46,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/jquery-ui.min.css","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/jquery-ui.min.css HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 14:46:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab8-7d52\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29137), with CRLF line terminators","md5":"7d11c5001641c8c4ad274f59c5ede325","sha1":"3105e6c4dea9703a5c07de2ab31d4441301c6f1a","sha256":"5029d220f23e415dc6c68aa58c895d70fb496af4bc6a09f89f566956325c36e4","sha512":"78d9654e6779d86f37c3076bdf8d3e77f5d834bb99509f91c14ff21bd89efb730a231e87a64314a17d412bb3ab2fdb40ab419720974aeb567a44cc6694e31fb8","ssdeep":"384:UCwiEtw1cR8lOXHc11evBMzymUh+4O6Gtph4Sc7nfZBhVi:blEtPXHcEBMznURO6GtphoBhA","tlshash":"bbe25330a5c2242dfe33c23061e11ef4523bc142eda65fbda09af65953ea8e4c47b971","first_seen":"2025-12-27T16:04:42.429285Z","last_seen":"2025-12-27T16:04:42.429285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/1a3a6613%20copy%202_smaller.jpg","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/1a3a6613%20copy%202_smaller.jpg HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:00:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78c2-25d696\"\r\nexpires: Mon, 26 Jan 2026 16:03:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2479766,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 4096x2732, components 3","md5":"37e2be4edecb37c0692c5972b6029a42","sha1":"668d0a099c1d540bb1f95cf301dc93b76ee45067","sha256":"39c313e0b8e319efff1f2cde14ccb1dc4e542a1496cbda4104c2bb9e3ebcdc35","sha512":"fb57c02634b9bfc05fee1328979dad2cfcb37e95f58559ed48b21d52f006a1c559dba93148bedf7d95541e90f95dd7c367fac6914b78fa2fb10eb4483b32a3dd","ssdeep":"24576:omwuewMs8iW2jwT717mGOzISyKmDHnjCVrWdGnYSmlJ:omwueqFuiGE8RDHjCVr2CYSw","tlshash":"a52533d295310a134eb1117554827e8f9c47db202f6786ceeeb498216e94394f3af3ec","first_seen":"2025-12-27T16:04:42.430045Z","last_seen":"2025-12-27T16:04:42.430045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/css/pk10.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/css/pk10.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Feb 2025 15:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4c4-53fc\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4ad2a39088656d3fbc9a8695463fb540","sha1":"c736fced00b9a629bb98d61e8e662394ff2afe53","sha256":"ce537293741ba0dbc920bd27a9bcfb575ce7382ea545f812071851932bf5a8f9","sha512":"c8648f0d3db43f80502064c7c0bf8a29345de217b3363eaa77e78c4a13f759c173f867743b80caedab875603c1d36c690d1ad8a82c001514ca9c64cb8d02a907","ssdeep":"384:Il/unsDrTtY0JMVYTJbtl/wqozQ2isEUc8JvWNJo4OD2bMX6t2Wn00LtK0N5djwC:Il/unsDrTtY0JMaTJbtl/wqozQ2ishcF","tlshash":"37a20439166a2d8db2539aaabff41fd63ec084150b0b42eff5d3ba1853c56702c631c9","first_seen":"2023-04-07T04:13:03Z","last_seen":"2026-04-18T09:31:25.67796Z","times_seen":1339,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/local/pk10/head_xingyft.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/local/pk10/head_xingyft.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 300\r\nlast-modified: Fri, 19 Dec 2025 15:18:06 GMT\r\netag: \"69456cae-12c\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"01feddd902eeeca995c7dbab1b9b272f","sha1":"c3359a5210920197b16911c2738f98a16adcb48d","sha256":"1c1b040d34d262f37705c6029a53a1f2aed341ea351c440b98e2d725fdd51881","sha512":"0f77bdfb24a6bd78d9e89f84aa28b1544d25aa3e7512aa47ba0f97d8ae7b92284a1ec5272125ef9e4b406eb58f50381c68ee3d9be0abdc1c2620fc3743504063","ssdeep":"","tlshash":"65e072071c7b2012a487b328881dc186e4a23e88a083adec8e43f980352848a600df2a","first_seen":"2023-03-11T22:11:53Z","last_seen":"2026-04-18T09:31:25.675218Z","times_seen":537,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:52.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.-q5RMtA6wjE.L.X.O/am=gMA/d=0/rs=AN8SPfqtQ_D_EH9SdWnMTx6DoLO-0hN4Hw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 00:11:35 GMT\r\nexpires: Sun, 27 Dec 2026 00:11:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 57137\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-04-19T02:33:51.814726Z","times_seen":55954,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/finisher.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/finisher.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-9662\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 249 x 515, 8-bit/color RGBA, non-interlaced","md5":"ea668eddf27b1a7cbcd7409449dfd3af","sha1":"7898bd755944d53b91a1068bf6a455dc3f1bf21c","sha256":"23a9ca11611feab9c5ae5bef8dc130432412918e1ff3a96daca947261730f45a","sha512":"4a134c4115a5639af33db71e277d4fc191e5dfe676f4b9121929f99cfe7d11a389f91fe12eba746ddf07e53e2e4abbabf7d22ad1fc365491cf4f0a395900e983","ssdeep":"768:sCNE5QOtpiNCk1IRKIfRTPF4kuJY62ZhSB+rGFr:RNEOOmHS1fjuUEoK","tlshash":"c203f1c314dbaf24d2ee7474aaba9f4e1e542c05266188487c6fd4844cfbf9f9d689c0","first_seen":"2023-05-20T19:29:41Z","last_seen":"2026-04-18T09:31:25.69429Z","times_seen":537,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/siteanalyze_68816.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/siteanalyze_68816.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nCookie: calltrk_referrer=direct; calltrk_landing=https%3A%2F%2Fwww.pacetonet.com%2F\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Sep 2025 13:21:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bae3c4-c070\"\r\nexpires: Sun, 28 Dec 2025 04:03:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49264,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49263), with no line terminators","md5":"39b74f49b3744c8371eb745ab0184273","sha1":"cc8f8c2b7fcf01235ae1e4d98897e44e488b553d","sha256":"7d31f8c0af13138e86291b8499d3a03b6966264d6230fe175af0931b1ccf0306","sha512":"108b8a8c8cb17fc8274839e3b07f492d1709eea672daa7c261d0f92f396608981ed9690d2d20b3031b11ee2aea04c51c1603409135603e1f0acd8dc3b5625222","ssdeep":"1536:7SpxIh1ufa1qxD4wXIy3rjtgu5JsDt1CPGP1/pq:70DB","tlshash":"df2319deb144603a07f7436a287f235db1372a6718889096f76ce9a41c69fdd006fe2d","first_seen":"2025-12-27T16:04:42.433153Z","last_seen":"2025-12-27T16:04:42.433153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/index.html","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/index.html HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Dec 2025 15:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456caa-287f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}],"data":{"size":10367,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"18a58c6687f6447444491ce24bf1c748","sha1":"3bf8602bf25b14f53c5cc1a66918fe4aadc83d28","sha256":"62e6db3a382ebd6de318019cb333dae13315dbd0cbf74b30af1991d2722c1f95","sha512":"24784fc4ce6e1801c15a7c13dbf74889c89e59f845c030e7e8f25830bae9ac3d4b58de273dcd1fdd9da08363778f9a0df5f7fc89f3442b875a0bcf9cdc0932e7","ssdeep":"192:mEyUz8pmj4l3C/01lqCFo/rh4o2hFoNFJohFMoAiXomiRonrOoPrjou8pouseBu3:mDW8pmj4l3C/01lqoojh4o2hFoNFJohB","tlshash":"8022c264354ea5fb66030283a2725b6e648fde31db378527f2f8227767c7c45a92700a","first_seen":"2025-05-25T12:44:27.162103Z","last_seen":"2026-04-18T09:31:25.610561Z","times_seen":500,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car4.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car4.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-6516\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 46, 8-bit/color RGBA, non-interlaced","md5":"3bdaa70ccb8ddc26f706b3ec052f00bc","sha1":"c9691dd694e2c422ea0dd748f6d1761115e87c95","sha256":"7eb6d1287441a1f1f7957639759543df3ad225a3828948b70d93bf17d5916ca1","sha512":"a9ffade01113d98b5628af679b8dbbf28e3e5bea211cff2ccb184d23439aa56b79558fe19208a2d9df56ada53e1d73b8452c764426d558f6538671400b064a86","ssdeep":"384:Q6t+5Ba/p7zL2aedkM4r6IfXEBLK8iiIrgaghP:ftVpL2aT6+0NcisRghP","tlshash":"f4c29e79fde035a7d566dab38ae4054428468e838ac0ac4eba9c4c562f23f14ec1f482","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.602376Z","times_seen":537,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"chat.hyro.ws/widget-client?snippetId=a2d7690b-7f78-45f6-9c5f-f9da0f3814a9\u0026paramsEncoded=eyJsb2NhdGlvbiI6eyJocmVmIjoiaHR0cHM6Ly93d3cucGFjZXRvbmV0LmNvbS8iLCJvcmlnaW4iOiJodHRwczovL3d3dy5wYWNldG9uZXQuY29tIiwicHJvdG9jb2wiOiJodHRwczoiLCJob3N0Ijoid3d3LnBhY2V0b25ldC5jb20iLCJob3N0bmFtZSI6Ind3dy5wYWNldG9uZXQuY29tIiwicG9ydCI6IiIsInBhdGhuYW1lIjoiLyIsInNlYXJjaCI6IiIsImhhc2giOiIifSwiYnJvd3NlckluZm8iOnsibmFtZSI6ImZpcmVmb3giLCJ2ZXJzaW9uIjoiMTM0LjAuMCIsIm9zIjoiV2luZG93cyAxMCJ9fQ==","fqdn":"chat.hyro.ws","domain":"hyro.ws","tld":"ws"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:55.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.hyro.ws","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 21 Dec 2025 00:00:00 GMT","end":"Sun, 21 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2B:47:80:5A:67:BA:11:AC:57:36:1E:69:3B:CC:B0:7B:9E:2C:30:85","sha256":"0C:D9:ED:6C:ED:BE:F3:CF:A2:01:5D:A2:93:D9:28:AF:59:4C:1A:28:6D:57:A2:80:DB:75:3E:43:6A:15:DF:96"}}},"request":{"raw":"GET /widget-client?snippetId=a2d7690b-7f78-45f6-9c5f-f9da0f3814a9\u0026paramsEncoded=eyJsb2NhdGlvbiI6eyJocmVmIjoiaHR0cHM6Ly93d3cucGFjZXRvbmV0LmNvbS8iLCJvcmlnaW4iOiJodHRwczovL3d3dy5wYWNldG9uZXQuY29tIiwicHJvdG9jb2wiOiJodHRwczoiLCJob3N0Ijoid3d3LnBhY2V0b25ldC5jb20iLCJob3N0bmFtZSI6Ind3dy5wYWNldG9uZXQuY29tIiwicG9ydCI6IiIsInBhdGhuYW1lIjoiLyIsInNlYXJjaCI6IiIsImhhc2giOiIifSwiYnJvd3NlckluZm8iOnsibmFtZSI6ImZpcmVmb3giLCJ2ZXJzaW9uIjoiMTM0LjAuMCIsIm9zIjoiV2luZG93cyAxMCJ9fQ== HTTP/1.1\r\nHost: chat.hyro.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.pacetonet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TRSeyywbSJoFmJjxu2M07w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 27 Dec 2025 16:03:55 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: aNE43tUqzfAvmDMM1Dbtqi+eukM=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nx-azure-ref: 20251227T160355Z-17f644c559992w9xhC1SVG4vg40000000rbg000000003v0x\r\nX-Cache: CONFIG_NOCACHE\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":291,"receive":4,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/js/script.js","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Sep 2025 04:17:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b912d1-7916\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30998,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30998), with no line terminators","md5":"ff87168bcc5a20079bfe6a4b2091e60f","sha1":"b3ed44758f766c6e63b0cb3fd167a5a1e6771d37","sha256":"21694778adbe865b251141f23cc325a850b3bc35aa9f55f4477191ca6bb8d09d","sha512":"789a4ec458b0c6b1ffa9afcbdb4df18c87558ae7564d4f44776f945a83a292a3515532f1e61aeaca64ef740c32b3dd87baa00b895ed5f64aec798d569550ac55","ssdeep":"768:pRES7FVJrsRhaRA/2noPvGIGpEgT1q5VfQmwftg83+e7cahzAMjjnTyS+R8X2GGk:p+ICefg51Qmwftg8eY3mk","tlshash":"b3d2b7dcb698b16e03d231ac243f56067275ae24634480b8b168e8f95c78bcf4936f7d","first_seen":"2025-12-27T16:04:42.435177Z","last_seen":"2025-12-27T16:04:42.435177Z","times_seen":1,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallbackef50.jpg?la=en\u0026h=600\u0026w=800\u0026hash=69E44E383774C89BFE4DD431CDCA425E","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallbackef50.jpg?la=en\u0026h=600\u0026w=800\u0026hash=69E44E383774C89BFE4DD431CDCA425E HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:00:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78c4-f401\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62465,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, copyright=©Kristi Jan Hoover], baseline, precision 8, 800x600, components 3","md5":"b6300ddea914da38f0f444c158218324","sha1":"3ad8d5cd62420be9276c01314623d4b6db8c78d1","sha256":"901a473add0f74e03b52a4c2f1ddbe427e797ec4cc474228bd97355d4ab7a9d4","sha512":"636f77d81d1d18a1e25a0d42b6dedadce17800d0fa04e80abcfd4a5057ebfbac2ae0ee5e3dcfe0e3ec74bb16bb6af28ce288a0613753a6a40425173cf465a45c","ssdeep":"1536:vbVIWvaXc8SBJvzHmrCIEwvT8Qd+IykVagigC+YT6/H46Ll:p/iXuLv76S8Tpd+IykVGfT6/H4U","tlshash":"1653024a86c625a625b8bbc40bb56cc48e359e74f423dacf16c885665b7e13b1ecc214","first_seen":"2025-12-27T16:04:42.43611Z","last_seen":"2025-12-27T16:04:42.43611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/iframe-resizing-parent.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:53.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.airbud.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 13:29:13 GMT","end":"Sat, 07 Feb 2026 14:23:47 GMT"},"fingerprint":{"sha1":"ED:89:3C:C1:D3:04:46:A8:BB:15:66:B8:2D:2F:A9:EE:32:C6:5F:93","sha256":"78:5F:BD:37:E2:24:C6:B8:83:20:57:B6:2E:29:DD:BA:C9:36:9F:02:96:21:04:B7:AB:E3:6A:58:D2:98:22:F9"}}},"request":{"raw":"GET /widgets/static/iframe-resizing-parent.js HTTP/1.1\r\nHost: api.airbud.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxOMrtnvtmX8XqSZbL7QYeiqpPt22sx3imTY_znrgaxTZg2tx4AJf7EHRBdrW3BF7dtI5Sq54AU\r\nx-goog-generation: 1766039481467343\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 371\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=Q3k2eQ==, md5=Cro0C/jOF+tp8kZQSYej5w==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 371\r\nserver: UploadServer\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\nexpires: Sat, 27 Dec 2025 16:03:53 GMT\r\ncache-control: public, max-age=0,no-transform\r\nlast-modified: Thu, 18 Dec 2025 06:31:21 GMT\r\netag: \"0aba340bf8ce17eb69f246504987a3e7\"\r\ncontent-type: text/javascript\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":774,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"a1863ce324d1cb0d59b95f3d772caf72","sha1":"4a9da5defd0b12fe41e308f4f9609e935fe7f06d","sha256":"d64adc00e83a3600f31c83eba6275d617f53189c8c47162db5d66fed2fb2b644","sha512":"c6573cf78404ba21379f81cee7de388b02459fa9dc746c3ae61dfa5a23b67fafb8315412ff7641c6b213812df92da5edf503421bb033d6b5c689efa10fbe58d2","ssdeep":"","tlshash":"510190df35350638812a6060258e6a493612d0447743caf678b455107ff4eb375b57bc","first_seen":"2025-06-23T20:37:59.25168Z","last_seen":"2026-04-16T19:34:05.64228Z","times_seen":41,"resource_available":true,"data":null}},"time_used":757,"timings":{"blocked":303,"dns":63,"connect":25,"send":0,"wait":151,"receive":1,"ssl":211},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/Widget.896ed53a.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:54.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.airbud.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 13:29:13 GMT","end":"Sat, 07 Feb 2026 14:23:47 GMT"},"fingerprint":{"sha1":"ED:89:3C:C1:D3:04:46:A8:BB:15:66:B8:2D:2F:A9:EE:32:C6:5F:93","sha256":"78:5F:BD:37:E2:24:C6:B8:83:20:57:B6:2E:29:DD:BA:C9:36:9F:02:96:21:04:B7:AB:E3:6A:58:D2:98:22:F9"}}},"request":{"raw":"GET /widgets/static/Widget.896ed53a.js HTTP/1.1\r\nHost: api.airbud.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AHVrFxOCZQTtt7j_ZgxL7smb0pwugnl4NDcL4For11XCd8KGl8buq4SZFl3SN0xXRKIqBti4\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\ncache-control: public, max-age=86400,no-transform\r\nexpires: Sun, 28 Dec 2025 16:03:54 GMT\r\nlast-modified: Thu, 11 Sep 2025 12:06:27 GMT\r\netag: \"b076097dca65d2efaac1e14410126fec\"\r\nx-goog-generation: 1757592387236690\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 207434\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=A15fOw==, md5=sHYJfcpl0u+qweFEEBJv7A==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 207434\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":787841,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"503dfdb74f031e9301be704394c82160","sha1":"989bfa2345eae2c2e01dd5d19973805383e52d76","sha256":"c15c9110be6460548e6818acad22c9dc198e32fb01370299c47a443f3d8b7521","sha512":"6585029d5e56abdc1eb687a4ceaac0f13d33fd471be721b8c372826c3abf0d0ebdb2a5b0a74e3d13da561ee66a019957c2fefdd9ab3cfc6faf6fa48e47623b86","ssdeep":"6144:zNCjs3yaNYkyBYTHw9hnF2X7npgVT507zjqODtVq9JhcnuOQGTwxHihxwOy:Rb8pNUqODtadFOy","tlshash":"a0f429cdb3c1b165938311b0412f110bb1baaa5b380d8458f2a0e9db7d79dd9613bfb9","first_seen":"2025-12-27T16:04:42.437396Z","last_seen":"2025-12-27T16:04:42.437396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/html/xingyft/index.html","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/html/xingyft/index.html HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Dec 2025 15:17:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca6-d41c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54300,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7e4209a43922214737b260fe21d52db6","sha1":"d07b7be201a4ab2793cf1773f9b962a54130b389","sha256":"9a3a4de561634bf96ecc3b34d2af54200f4098b41a0913667937b2a454de6e2a","sha512":"b17cacb8661d6276de656281dd3e8dcedb6002c691fc5494f64fd0ef696a14057290706fb63a53ae53e5511716f6aed6ea869f82f0591dfc86bead30db46ce3f","ssdeep":"768:dSk7FAkvf1fOpoLqFEHst7rQKL2THlb8+lnhAkXfCjMmmC:YjatfOpoLqFEHst72TFb8+BhAkvCjhmC","tlshash":"a133ac2933eea52a0263a2c740b56b45a0efcd35e762152af5bf127733cbd54780f126","first_seen":"2025-05-25T12:44:27.048289Z","last_seen":"2026-04-18T09:31:25.61005Z","times_seen":499,"resource_available":true,"data":null}},"time_used":1467,"timings":{"blocked":624,"dns":187,"connect":216,"send":0,"wait":216,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/jquery.async.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/jquery.async.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 902\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\netag: \"69456ca8-386\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (902), with no line terminators","md5":"2e3cd10cd7579756c32b479d018996ce","sha1":"f802c0231c81b061352b3c7bb4c64c143ce353f2","sha256":"9b52ff42b1430595e38ae165b5a8ac6719c0bfddf9407ef9bc720dc30f2d3e5f","sha512":"f268b0dfed8599261280098146616a56bf347d56edaae23924373d6f09c09df07eae57e89cd05fc86175aaa6e3c6d1e12a987a5ee5bb5d678a8e65db3a04c421","ssdeep":"","tlshash":"4a119cd87791a6050752b46c077f211cd23638141c1f9558b6bef4e25c1931eb12e9b0","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.509716Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/pk10BaseTrend.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/pk10BaseTrend.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca8-1a2d\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6701,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6701), with no line terminators","md5":"6f6fadebe51378762442a2211edfef60","sha1":"abb6dd63e315112728f3540ef124480e4b1e9048","sha256":"441c3db4288867eb549306e2797b1075d745408c6674660096a9ed695435391e","sha512":"07072b7f0de691c11760da89619c378b0dbae068b540676c6bed50e9c1eb089716a1b235f10fb35730c3afe2ac42dc02ea67fbcc80e3551afc7d5507feb0d71d","ssdeep":"96:bWkh9UBeGm8ViMUrjjEgYQEHqSKFM4AJjCk:N0iMUrHEe0qSKFM48","tlshash":"43d1a919e1822126b25f3efcc63fd15880610fb0e598ee4c76fd9ab16d34ac65073d6a","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.67378Z","times_seen":1391,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/html/public/head.html","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/html/public/head.html HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Dec 2025 15:17:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca6-532\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"626eb9ecd82619ad149f5b4aeb530720","sha1":"c69c26a74ba1c15ab35cb3b48242603bbbb83cb7","sha256":"dd472572f54f664106cd0ffc2a5e3266bbfe14067b202b26d29315a1479ed062","sha512":"0627d3cb18e744a86ee878194805d402182c839886fddf75ef16a2d9d5e273ead1d5e570b6ae518ce2217cf9e0cdea706aa8f34db6a8d72b3200ae31d9400d9d","ssdeep":"","tlshash":"8321e260f5ac6b2b40b323a2a17b8b45942f9d1ad3009c0076ee57f7278fa68710b545","first_seen":"2025-04-07T08:33:42.704596Z","last_seen":"2026-04-18T09:31:25.459698Z","times_seen":1262,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/top_header.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/top_header.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-a3d\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1334 x 90, 8-bit/color RGB, non-interlaced","md5":"0645513a43d1ab3a55afc452979b2aac","sha1":"8509d9f7ecaaf1b1ca9696986abd7ac2bfde5c8a","sha256":"88970a9fffb891f21a7b145561f3b65b158ac179a4fc3161122d7c5c47663575","sha512":"f30927629311d821f9be49a3ad6c9419d11ac93d374db12faf848b6fbc25968bf6e9a4101b36ce8481e0e9e1180be356835946eb2aef7064110fbd548d04712e","ssdeep":"","tlshash":"e951c8af9b01e4824012b59130ff31195d49d1b1fb82eccbba9de02247341f445327cb","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.657403Z","times_seen":537,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.airbud.io/widgets/static/iframe-resizing-child.js","fqdn":"api.airbud.io","domain":"airbud.io","tld":"io"},"ip":{"addr":"35.241.51.89","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:53.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.airbud.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 13:29:13 GMT","end":"Sat, 07 Feb 2026 14:23:47 GMT"},"fingerprint":{"sha1":"ED:89:3C:C1:D3:04:46:A8:BB:15:66:B8:2D:2F:A9:EE:32:C6:5F:93","sha256":"78:5F:BD:37:E2:24:C6:B8:83:20:57:B6:2E:29:DD:BA:C9:36:9F:02:96:21:04:B7:AB:E3:6A:58:D2:98:22:F9"}}},"request":{"raw":"GET /widgets/static/iframe-resizing-child.js HTTP/1.1\r\nHost: api.airbud.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxOm9HpEeKv8TYMnJ-5Kh7iVSIZg1PHqvF_c5TJNbNtD8YxQA-exL7CHFZjccN1e8imUc416ipM\r\nx-goog-generation: 1766039481447467\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: gzip\r\nx-goog-stored-content-length: 1111\r\ncontent-encoding: gzip\r\nx-goog-hash: crc32c=JjHlIw==, md5=PZHMpn2ZQyEWJI0aSI1K6Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\ncontent-length: 1111\r\nserver: UploadServer\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\nexpires: Sat, 27 Dec 2025 16:03:53 GMT\r\ncache-control: public, max-age=0,no-transform\r\nlast-modified: Thu, 18 Dec 2025 06:31:21 GMT\r\netag: \"3d91cca67d99432116248d1a488d4ae9\"\r\ncontent-type: text/javascript\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2986,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"71d0102bb2816ec21ed7202c9fccd5c3","sha1":"2a9c78a04f82b1f95b96e54f156fe7cf6c6424e1","sha256":"39afe1a9e598b02eab8d9b2c4985dcec3abb2a4f0e2ed4801459b812280d6891","sha512":"c0434d964c26dc4ca32eeac88e86cdb447fec1b9b0db43151543c330bc9fcbfe4f54720fb51a3698986159d8a3712d773f81d1cf391b1f4416c94bfae552b7fd","ssdeep":"","tlshash":"a5515266e7b05235425f6c9e1a0bd6457233c17fb6427c55bf4d21842fd68eb21303ac","first_seen":"2025-06-23T20:37:59.236135Z","last_seen":"2026-04-16T19:34:05.626304Z","times_seen":41,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":146,"dns":42,"connect":28,"send":0,"wait":146,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/local/pk10/jisuft_index.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/local/pk10/jisuft_index.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456cae-f9e7\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63975,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62931), with no line terminators","md5":"a8802a3562b2c19a6d9393ea421eca75","sha1":"8e4a7935096dc7cde2df63835fcac41f8f9c34f3","sha256":"2ed2ad0e95c06d972e71ced9bad5eafd0e0d543630457d89cc2e90b4b8631140","sha512":"4e39539fac88b02ab699fe49e66879479ab6cf6dcaa1aab13031e9fdba740389e277e9dc9755ac38d450f6c078931e77f0c15ee127b39aa52e9a4f3e2e15da3e","ssdeep":"768:gZybdP2PNTC36k6cSe1buFaaPl7DM7HQ/+elxFi7UkpOUcFCtofJjQrwX:JdUclpW7DZwpOUKCeyrwX","tlshash":"4253080db2a2339f20fb21e2206f7a4680201d36d5014946f9bee6a61deed857477f1f","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.447617Z","times_seen":544,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.api168168.com/pks/getLotteryPksInfo.do?issue=\u0026lotCode=10057","fqdn":"api.api168168.com","domain":"api168168.com","tld":"com"},"ip":{"addr":"35.241.91.37","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:52.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.api168168.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 23:20:47 GMT","end":"Wed, 07 Jan 2026 23:20:46 GMT"},"fingerprint":{"sha1":"98:FE:CF:38:8C:3C:38:5D:F9:2C:0E:CC:D7:AF:31:A5:B7:99:8B:57","sha256":"38:27:BF:F7:8B:2C:DA:A5:7B:62:2F:D4:AB:A8:29:BD:6E:54:A1:44:A1:0E:16:1A:A3:FD:E4:4A:30:DA:94:0F"}}},"request":{"raw":"GET /pks/getLotteryPksInfo.do?issue=\u0026lotCode=10057 HTTP/1.1\r\nHost: api.api168168.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jn1680.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:53 GMT\r\ncontent-type: text/html;charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://jn1680.com\r\nvary: Origin\r\naccess-control-expose-headers: Set-Cookie\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":754,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"98cfe553bcf5b2cd52e6f908db00f979","sha1":"b36ddd04f2170c9722fb58d9e2c0ff4f8f8bf386","sha256":"2516ba7b420a95bac18a9de2ed013ebe05a4f878350e81cd88cd8016c6f89700","sha512":"57880cefb2427eaebd55850e1185b536581a50d093c66bb93ec575856283fd39e0ce9d4fea416f947fbf8fa161d18282114a67f9792faefc2123626983af0cf2","ssdeep":"","tlshash":"8a019055a96c3d687f05a072753ab2d9557463431c9c2ed0c3f9cf34054613a290eb44","first_seen":"2025-12-27T16:04:42.442506Z","last_seen":"2025-12-27T16:04:42.442506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2147,"timings":{"blocked":904,"dns":256,"connect":217,"send":0,"wait":331,"receive":0,"ssl":436},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"api.api168168.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/winner1.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/winner1.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-c6ee\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 422 x 184, 8-bit/color RGBA, non-interlaced","md5":"d108170c20d55ad7f865937ca6ce2853","sha1":"c2d1a294ec6653e10023083e6ca5901d4e4c7957","sha256":"6c9e65896a168c67dc441d6bbe3785da8659f68623619d665b0b1a4c802c1a1e","sha512":"410ca2cdbc055d6918a6989f0a91541ed5da83ff4d1b81b6abb63266e6f0b64c333f2f8cba3b42f67babc31c5da9b3c162a576727b83da6f297d2a72e4c0b155","ssdeep":"768:7tAdBNpVP1jyVMBk79YJgX0WMe1aU8n/KCywVjoPIOu7LWga7:7CR8uBJgX5oKbQB747","tlshash":"4033e0117577b7552cc3d2305f72f52280f65f839286ec12b4ac6876afa9fc21e9a106","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.543038Z","times_seen":536,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/goals/6370f9ed4a3eff10dc46a2a1","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.1.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:54.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"GET /sdk/goals/6370f9ed4a3eff10dc46a2a1 HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-LaunchDarkly-User-Agent: JSClient/3.1.0\r\nX-LaunchDarkly-Wrapper: react-client-sdk/3.0.1\r\nOrigin: https://www.pacetonet.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: max-age=0\r\ncontent-encoding: gzip\r\ncontent-md5: d751713988987e9331980363e24189ce\r\netag: \"d751713988987e9331980363e24189cec\"\r\nld-region: us-east-1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-ld-envid: 6370f9ed4a3eff10dc46a2a1\r\naccept-ranges: bytes\r\ndate: Sat, 27 Dec 2025 16:03:54 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410027-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1766851434.016664,VS0,VE1\r\nvary: Accept-Encoding, X-CDN-LD-POP-ID\r\nage: 0\r\ncontent-length: 26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-19T02:28:53.990803Z","times_seen":242187,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/hav4bvx.css","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/hav4bvx.css HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Sep 2025 09:00:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78b8-2efc\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12028,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (399)","md5":"80f54073a75c3b696e3fb2c52929f340","sha1":"ab02f5bc88fb7cd36fc746709ca88005dc71c0a4","sha256":"02bcaf5dfae7980564e0d6d5af7f2554d85ed87a72a4b972688a71e9f279976d","sha512":"017502630252daefd74b4a078ab3b32f9932f2f33c9d29401720ecccc82e3bbcc3129e648b45224efa348d0e57da0dd6be8ab482eb0465d193c2730c9a925995","ssdeep":"192:pHvHMPMKM5MtMVMKMbTMmM0MsMuM3MSMuMDM5MmMJMYMoo:qk3Ke23bYT9lL8PLoKT6xoo","tlshash":"64424ba0410b4cd3e4c0696174c677f0952e391a31e8eda535168e7748faee7a610bff","first_seen":"2025-12-27T16:04:42.444519Z","last_seen":"2025-12-27T16:04:42.444519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?9449080f1fd9d69519fb3ef29e931160","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.182.140","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?9449080f1fd9d69519fb3ef29e931160 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11292\r\nContent-Type: application/javascript\r\nDate: Sat, 27 Dec 2025 16:03:52 GMT\r\nEtag: 2383c38671976d7c4f676574f7affa00\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=FAB1AAF0C433F322; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29898,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (622)","md5":"00c73e21f0583b80b44b5538b9000df5","sha1":"977714121880095fd2478e98bc1afc2c1801c92a","sha256":"e96a047b2ea879a30260f9058dd4a9b395360e370586b2f0df4a7939c56d421f","sha512":"f2e19afaff8a1de37fee7735fcd2d291532220f4e78063713bd82abe1666e5c14ae0814024f29dc03d5737f8df64545451b04209859d16e19ca9a661b30fd8db","ssdeep":"384:voJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:vo4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"7fd2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2025-12-27T16:04:42.445462Z","last_seen":"2025-12-27T16:04:42.445462Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4251,"timings":{"blocked":1960,"dns":432,"connect":261,"send":0,"wait":326,"receive":1,"ssl":1268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/76982_social_400x400-2190577822.jpg","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/76982_social_400x400-2190577822.jpg HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:01:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78cf-1f611\"\r\nexpires: Mon, 26 Jan 2026 16:03:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=5773, bps=218, PhotometricInterpretation=RGB, description=Senior man using oximeter while having breakfast with his wife at home, manufacturer=SONY, model=ILCE-7RM4, orientation=upper-left, width=8660], baseline, precision 8, 400x400, components 3","md5":"8cbbe9a1f56bb893182142be073f6a07","sha1":"660223f5bc804f16d91f4406e10d89c9536710cd","sha256":"933f6363706417a579b955af487921ec104c26e4fa05ab6c1da92156ba51249d","sha512":"f74cfaea85e88f2fffbd859a8c878ad1a0e81f5ed9cec12162242ca000efd653e90e232fd8ec197abdd185c037527a50d584c9dda7e5c3e85bf4d5e9a2946db5","ssdeep":"1536:A7Z7Z5LvoRFb2vcQzOM790k24O7ZP4ENWSlpAsPfRn2EAKH+8MXERLBBCWLU/MqQ:A9rLvoXwkEzOxtNWSlpxRlF+ZVumMqmR","tlshash":"5cc3120eaf79ce22d0c84034daa1c3abf35752acc113ad90bd5e5712fb237e18da515a","first_seen":"2025-12-27T16:04:42.446132Z","last_seen":"2025-12-27T16:04:42.446132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/css/pk10_Gary.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/css/pk10_Gary.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Feb 2025 15:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4c4-4353\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17235,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (17227), with no line terminators","md5":"de33a622685218df8a9df40eab336b97","sha1":"b43b2c47a2cfae500530df74e81f70598e526d15","sha256":"cf16f026f5d571890a8487159bfd866aa86385cd9a40a984c96abc5024121ccc","sha512":"988c97ea9731bcf713bc845b6e4740f58df32677a3eefacb5f951c72010f7c7a0f85ed441d44475712818b464f83a3425ad81a4146676eef94280f12ce78094d","ssdeep":"192:gF2iR/BwyqqNcFJW9Vh9+gQ+3o7d+pAgquH/kM:V4uqNcFs7hIg73o8AgqK","tlshash":"cb72463a56783244f377d2367bd1feac2921c140c2662b69cd67be35848e3063ea7758","first_seen":"2023-11-30T05:06:26Z","last_seen":"2026-04-18T09:31:25.535141Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/Sortable.min.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/Sortable.min.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\netag: \"69456ca8-0\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.callrail.com/group/732226907/f1519ee45ab15a26a99f9b63/12/icap.js?t=1766851431417\u0026uuid=aed4644a-3d18-470e-8334-afdb8d7623f0","fqdn":"js.callrail.com","domain":"callrail.com","tld":"com"},"ip":{"addr":"52.84.50.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:51.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"swappy.callrail.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 11 May 2025 00:00:00 GMT","end":"Tue, 09 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A4:F6:DE:49:47:4F:F0:04:80:30:A2:C8:D1:D6:2A:97:08:03:F2:59","sha256":"70:E3:BA:86:64:AF:60:38:89:DA:28:95:40:62:EE:B3:BF:14:80:4F:85:36:28:9A:48:00:5E:3C:0A:75:9D:68"}}},"request":{"raw":"GET /group/732226907/f1519ee45ab15a26a99f9b63/12/icap.js?t=1766851431417\u0026uuid=aed4644a-3d18-470e-8334-afdb8d7623f0 HTTP/1.1\r\nHost: js.callrail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 22\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=0, private, must-revalidate\r\netag: W/\"1643b5cec44cc597bc2cce3448ce5434\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: ae8fa4fd-8ebc-4010-91fd-83cb749d8f00\r\nx-runtime: 0.009437\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 67fb37d4b7930077be54eaea3254b4ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: raJyy_-YHq3mOb5lAXEO3IUbmMxGo2mVvz6qhhxcIvjW0yooVCFlnA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"428fbfbe32240731c2093be221cc8df3","sha1":"8b831bc780288cdfce6dba1a93d062c9379f4def","sha256":"1643b5cec44cc597bc2cce3448ce5434241eec9b92db8af268ee3ee1f198441d","sha512":"157c60a1a8619ad1e6162b3e945db8b6ec82b37359e23dcc8eccf9e2399662890c591a49046eef061e271a6f18c00a695ba1ac4837eab7b29ec37a36b4a542b7","ssdeep":"","tlshash":"9a700000300b0080e08a820300000000a00e208882082000030a2ac8a0002cc0238b88","first_seen":"2023-03-07T01:16:02Z","last_seen":"2026-04-19T02:46:13.628204Z","times_seen":3968,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":9,"dns":0,"connect":1,"send":0,"wait":217,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/flame.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/flame.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-4b37\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 11, 8-bit/color RGBA, non-interlaced","md5":"68a37f149e7f9a922fde0037b1679dc9","sha1":"ac03aa25f9870d8ee303a30404bafca14f320582","sha256":"9a09c7c2a667a26fa64cd2efe073ac69ce987ea1e60b983e2faad997850d5058","sha512":"70da540a6a2a52f6a9b980790726a44427b201b1d70eef8779e674c9069b15f7a2802a89c42a0ba3a45610b4c255523fb33bfcabeb2dfd272c8c1ab689e7444d","ssdeep":"96:0DSDZ/I09Da01l+gmkyTt6Hk8nTRWvkikOcNGbq9GfNXrNXVhsc5Bvgd15qLoSQ9:wSDS0tKg9E05T8kiNcQv54d15yQ9","tlshash":"43822a28edf0b089a49db6701dd425419e770bc7c9822d88bacdcada1f00b994d9f5e6","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.45557Z","times_seen":537,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car5.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car5.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-6ba2\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 50, 8-bit/color RGBA, non-interlaced","md5":"f261e3e7f1b473ef4895a864c28aa8e7","sha1":"91f23c1437bea8967a02ed137e7c12e3f5a996c1","sha256":"974b7c71b3cb5a03a19cb988c347018710f982f715283d49e6e5f4bee9fe718d","sha512":"fdeeec2240ef29fcb6bd8ed43e6a4cc8678b732a10fd0d71cb3229119464fddeb60cc3363a7d3d915ed17f6e61b4fb6b7b5b6a173b32cc5226a91898fd8b3279","ssdeep":"384:66t25BHij/Irp5gxOxHWv6oJCUnDxiqNI91RfjxkL5G:NtLQrsYWi/0EqqL4w","tlshash":"69c2bf3668e2f0708898d3b17fc61e49897f8587d8939ca1f9ddca5b6f11b8c0c1b916","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.655199Z","times_seen":538,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/css/magnific-popup.css","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /css/magnific-popup.css HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 14:46:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaaab7-1c86\"\r\nexpires: Sun, 28 Dec 2025 04:03:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c03fe8704d90e35eba342d2ca2c5a530","sha1":"74a41372d833195b77dd9e167f82ca395cc4702d","sha256":"1155981e8193622f58553eed0bba2fa43512af362a3d54dedef64c46970bb371","sha512":"0de3ac5d97701cc10e70418347b307399ca94e3b2c2e5fee3ad8f30a3bd44f5fd119e669895495ce566011de827ff69dab617ca5b5d6d96c093a88b55e990d46","ssdeep":"192:NN4yXVw9SfoRyEBpEbxHq98Z/vzz/89aO:OSUL8xH2","tlshash":"8de1cf16db212342e537e7b5e7938729e7220063e30304abbfd15845ebfda484661fd9","first_seen":"2023-04-05T15:18:30Z","last_seen":"2026-04-19T02:12:32.366751Z","times_seen":6298,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/img/haomaimg.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/img/haomaimg.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/css/public.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:37:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4d0-2c891\"\r\nexpires: Mon, 26 Jan 2026 16:03:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1204 x 600, 8-bit/color RGBA, non-interlaced","md5":"e2e251464ed0269900791e37a8557086","sha1":"f26741ef593f9fa19c145d34a1d90b70ee90fe26","sha256":"2cd69edba71483d88d9663a598f00d975a52b3a8a8422e7c9d50fd1ac3f0464b","sha512":"c0376b445e92a7ad916811bfdc640d1d17d6af7acf16f19f023e41fbf69f17e6bf0cf068b32364e6dd1731125115d9456384b156f6bf0c274d67c98c06e3c0aa","ssdeep":"3072:PTWUHyie4FLR3c2PbYLNYACAb2jwDLp4AZm9xGoTgg1nRHnwQNzvZVha09+m:PTQieQR/PcLNOAb28vpIH0QBNrha09+m","tlshash":"a80412c3ad012d7bde40657e4d9b4b1e424090f01cb657a4af1cfef8abd34e6486a61b","first_seen":"2023-05-02T12:59:34Z","last_seen":"2026-04-18T09:31:25.612126Z","times_seen":1386,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car1.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car1.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-5c2d\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 39, 8-bit/color RGBA, non-interlaced","md5":"4a407d7911737f458d640a2f7e3db778","sha1":"461dd64354525c10204848eaa18608cf1a4bec4a","sha256":"b3097dcccf718c5fa33a797596e7822ba76ca82ffb03d59714217118cef17f2b","sha512":"e73f7c2e5d54d8656c4e2303fc2dee712ee78bdffd9a785c0484ebbf245242b01eb9624b6f985eccf7d3b428e3c75fa9cb1180e3760d5af6e3be55224701bebe","ssdeep":"192:dShkt+5Bz3SC+DgTkBmaZXwNTYUM/nzDuQ7CHHd5H2DLFr9X:c6t+5Bz3SCksrsXwaUA/CHH3GBr9","tlshash":"e3b2ae60fcf1b599c49986335c43249a0c5aadc365109c0cbf9e466b3f727424eaf095","first_seen":"2023-05-20T19:29:41Z","last_seen":"2026-04-18T09:31:25.481469Z","times_seen":535,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/js/plugins.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/js/plugins.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 344\r\nlast-modified: Fri, 19 Dec 2025 15:18:02 GMT\r\netag: \"69456caa-158\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":344,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (344), with no line terminators","md5":"5e3e77c7bc9751dbb2f8a1424a88ff22","sha1":"ea6bdb640b4c67c0799d1c5c9649bc8d353369b8","sha256":"a5290e3fca88744de30903f92ffc5e4b7f1d05d3c3bac62f42abd7b97d43f9ce","sha512":"118d6a9937c7b2b20dca92d900dcc393bd25aeaf888d9c108a476f14f6f78b1e2a23d4a5f9114b729c2a2cbc3e4da1ab6a82838dfc858ad7fb377e22bebede91","ssdeep":"","tlshash":"53e0c010fc8da42645ffb4acb4fb39c88f9c06134008c1f6e41c4c482c69b0744074e7","first_seen":"2023-03-07T14:01:44Z","last_seen":"2026-04-18T09:31:25.661461Z","times_seen":548,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"chat.hyro.ws/widget-client?snippetId=a2d7690b-7f78-45f6-9c5f-f9da0f3814a9\u0026paramsEncoded=eyJsb2NhdGlvbiI6eyJocmVmIjoiaHR0cHM6Ly93d3cucGFjZXRvbmV0LmNvbS8iLCJvcmlnaW4iOiJodHRwczovL3d3dy5wYWNldG9uZXQuY29tIiwicHJvdG9jb2wiOiJodHRwczoiLCJob3N0Ijoid3d3LnBhY2V0b25ldC5jb20iLCJob3N0bmFtZSI6Ind3dy5wYWNldG9uZXQuY29tIiwicG9ydCI6IiIsInBhdGhuYW1lIjoiLyIsInNlYXJjaCI6IiIsImhhc2giOiIifSwiYnJvd3NlckluZm8iOnsibmFtZSI6ImZpcmVmb3giLCJ2ZXJzaW9uIjoiMTM0LjAuMCIsIm9zIjoiV2luZG93cyAxMCJ9fQ==","fqdn":"chat.hyro.ws","domain":"hyro.ws","tld":"ws"},"ip":{"addr":"13.107.213.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:54.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.hyro.ws","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 21 Dec 2025 00:00:00 GMT","end":"Sun, 21 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2B:47:80:5A:67:BA:11:AC:57:36:1E:69:3B:CC:B0:7B:9E:2C:30:85","sha256":"0C:D9:ED:6C:ED:BE:F3:CF:A2:01:5D:A2:93:D9:28:AF:59:4C:1A:28:6D:57:A2:80:DB:75:3E:43:6A:15:DF:96"}}},"request":{"raw":"GET /widget-client?snippetId=a2d7690b-7f78-45f6-9c5f-f9da0f3814a9\u0026paramsEncoded=eyJsb2NhdGlvbiI6eyJocmVmIjoiaHR0cHM6Ly93d3cucGFjZXRvbmV0LmNvbS8iLCJvcmlnaW4iOiJodHRwczovL3d3dy5wYWNldG9uZXQuY29tIiwicHJvdG9jb2wiOiJodHRwczoiLCJob3N0Ijoid3d3LnBhY2V0b25ldC5jb20iLCJob3N0bmFtZSI6Ind3dy5wYWNldG9uZXQuY29tIiwicG9ydCI6IiIsInBhdGhuYW1lIjoiLyIsInNlYXJjaCI6IiIsImhhc2giOiIifSwiYnJvd3NlckluZm8iOnsibmFtZSI6ImZpcmVmb3giLCJ2ZXJzaW9uIjoiMTM0LjAuMCIsIm9zIjoiV2luZG93cyAxMCJ9fQ== HTTP/1.1\r\nHost: chat.hyro.ws\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.pacetonet.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: PtHAahtx2K1MroczrZAKNA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 27 Dec 2025 16:03:55 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: GO4BJa9MaRnsywfdak6tNHdZqJ0=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nx-azure-ref: 20251227T160354Z-17f644c5599z8v8fhC1SVGmmys0000002750000000008m4v\r\nX-Cache: CONFIG_NOCACHE\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T03:23:17.578713Z","times_seen":13919996,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":0,"dns":145,"connect":164,"send":0,"wait":304,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/png/background-misc-shapes-1.png","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:50.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /png/background-misc-shapes-1.png HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/css/summa.project.summahealth.website.min1137.css?d=20250917\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:50 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 14:47:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67eaab0b-d3ea\"\r\nexpires: Mon, 26 Jan 2026 16:03:50 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 580, 8-bit/color RGBA, non-interlaced","md5":"964e48c2df5c27a3073204e4f8893ce2","sha1":"e05778129707b43e3e46dd9675617d8e6a1fdeb0","sha256":"2b5b1e2bfb0772befc25c6046416263e1f393e97562b8f613863887395327f1f","sha512":"2c5784d1648d74149ed9e5f2950c16555c726cf7b0f22620efee641fceade801e77faf748989f279b6e1b918fae1ed5b0155a4c233ff723a35fcffc446ec1643","ssdeep":"768:PZwA3JuYSq5QP5hjJQZyrQZPuZpJQwxzTkB5ZPg+j9oVnj2a+Bm7P3DfmJlxuNuY:hX5uHkENZ8wmB51loVPV76JlVZWV","tlshash":"0a33e141cd7bc610cd7b243558e4bf93254f88fa40ca5b1fd6fe418e1c81e96e629e88","first_seen":"2025-11-23T10:22:06.111346Z","last_seen":"2025-12-27T16:04:42.452298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/jquery-1.9.1.js","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jn1680.com/webapp/html/xingyft/index.html","date":"2025-12-27T16:03:51.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/jquery-1.9.1.js HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/html/xingyft/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 15:18:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69456ca8-16b57\"\r\nexpires: Sun, 28 Dec 2025 04:03:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93015,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"0ced1955d04ad67f93c642501960172d","sha1":"e346705c96ed71fef43144a893dc26f0d1ff2a81","sha256":"7196db5ce1154dda0f62614999dfd169a0e5fa9db634c12c308f9f9b22cb6f90","sha512":"c5fdcd09f23cbc4adcdc9ae38e7535eab9d10026b2607c21414cbb02258f0eb99bea0c8b53ee69129c62cf086898f4fec46d1a52f1170955b2b4d6ab0c636a47","ssdeep":"1536:g9sFlxCuYQ8kdpjEhDH19D7jXHi7mdG5bakVV6qN6MQDKwTYHUfn06dPGMIcXQWy:JXdURN6G7h8aGtvnx","tlshash":"b69319dd76c5b12247ab307d106f540af236599a280c8450f135e8fafc7898aa177f7e","first_seen":"2023-03-07T12:24:04Z","last_seen":"2026-04-18T09:31:25.65981Z","times_seen":1251,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:52.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 10:57:46 GMT\r\nexpires: Sun, 27 Dec 2026 10:57:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 18366\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-04-19T02:33:51.806491Z","times_seen":60186,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":56,"dns":4,"connect":20,"send":0,"wait":22,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/numbersprite.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/numbersprite.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-be51\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 640, 8-bit/color RGBA, non-interlaced","md5":"3d0ebc01efa495834ce4fcce03437612","sha1":"cd1c736cbb21cf630787a902af3d261d03211761","sha256":"578ceaee0308044d480007757a7b0048e8b89d008efa2c2bb144d2670eaa21d5","sha512":"d3369c8965f46d06067a0a8f469a2c3eb74f8a7bddb7ff6cfe8cedc1e754486fe760185651f40b6a85aa4e22bd80d2f85dabf91ef899b0736af574fc42867ebd","ssdeep":"768:UtV624jlUIgoo4wCc+v2CEwj1XaCvJMYbYOuto90+rla:UD6lJox4vHzjcQJMTk0+5a","tlshash":"d323f1be5d74b48063c8b37919f521a5ade384438d486c3633eeb8166f197c99c2b285","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.633191Z","times_seen":533,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/on.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/on.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-d3a\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"f43d038e8881f8d853ecbd9615a03511","sha1":"c5b4dd8c2235bf77c91e0333fc17f51b136bc4f5","sha256":"9e43c437345e0bbbf280dc16215c2ad4d48e482baf204e6077247eb9176e8fb4","sha512":"2f9c129435d9a51c1ab8eb56c45c975ceeaf72bc1c5adefc429abc5db6f53fc9bd370876075d957de5eccc134cc4c5ade77b55c8dad2b1da87e7fd364ea66925","ssdeep":"","tlshash":"bc615c8085b07b5f457b2f609277dcb9a1fd893838829ae0bc1166780d365aa32ce5e5","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.663575Z","times_seen":537,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallbackef50-2.jpg?la=en\u0026h=600\u0026w=800\u0026hash=8B0554D93C4F30856E68CF830679FFEF","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallbackef50-2.jpg?la=en\u0026h=600\u0026w=800\u0026hash=8B0554D93C4F30856E68CF830679FFEF HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:00:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78c8-275d6\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=17, height=3000, bps=218, PhotometricInterpretation=RGB, manufacturer=NIKON CORPORATION, model=NIKON Z 7_2, orientation=upper-left, width=4500], progressive, precision 8, 800x600, components 3","md5":"d1e74c276ba3d3c2ed6dbc08c2a82070","sha1":"b7b1921148da18fb4c70e393ad12e33b0ddfab07","sha256":"d0cac080d6f9151fb2be5c24f15df266956356248c689c8419fdfd41c7f9537e","sha512":"ca54e4c5b91b99b87123a7827266d24ad6b7076d1cb1dc6539a916fbd453357d315799cd91e3368f9690513e193ddfde9a01e0d362d0350d8434d1602227d1df","ssdeep":"3072:Q87RtPg4W46pNvb7VNf7AvwywKxMzC/p5IOhM6K7BvFLgRr7FWd4V38Kg7:QpXrb7Vl7AvwywKYkY16K3URrZE4V38x","tlshash":"b9f3f110f2a44e60d5e01539c9b2ebbac7178d42cd434d46b8eeee077bb1ec49e9b542","first_seen":"2025-12-27T16:04:42.456383Z","last_seen":"2025-12-27T16:04:42.456383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pacetonet.com/jpg/_fallbackef50-5.jpg?la=en\u0026h=600\u0026w=800\u0026hash=AA100BAEDB437D1D71A6460084B6317D","fqdn":"www.pacetonet.com","domain":"pacetonet.com","tld":"com"},"ip":{"addr":"34.150.55.101","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pacetonet.com/","date":"2025-12-27T16:03:49.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.pacetonet.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 10:12:11 GMT","end":"Tue, 17 Feb 2026 10:12:10 GMT"},"fingerprint":{"sha1":"54:A7:CD:D3:8F:63:AE:CA:10:78:0C:CC:8E:4B:8F:2D:46:13:92:39","sha256":"4D:05:56:9E:65:A7:AA:74:C3:4E:B5:D4:70:61:41:41:D1:B0:15:77:63:25:38:C4:2C:D4:23:E8:64:DE:63:85"}}},"request":{"raw":"GET /jpg/_fallbackef50-5.jpg?la=en\u0026h=600\u0026w=800\u0026hash=AA100BAEDB437D1D71A6460084B6317D HTTP/1.1\r\nHost: www.pacetonet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pacetonet.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:49 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 17 Sep 2025 09:01:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ca78d2-8a88\"\r\nexpires: Mon, 26 Jan 2026 16:03:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35464,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 800x600, components 3","md5":"83819f60fd45d0030129e14f4d9c4b1e","sha1":"ccc3b378fd5215490d81e291b986d3c7c32f8364","sha256":"b28fde6773f9ddaddce184ebe4cc01908eb782c7d34df459537dac4a1cf2d804","sha512":"8e96ddb7ab370ee3d38e1177085c47ec9fd6dd96d806b7dba5549d8666ca0d11a0daef1f507cb94a9a5667133eee47dfcd14fe85c8e12556ac76d948440cd03a","ssdeep":"768:MPocEALFoMfC1d7gPWCMeABanvZXNTQCcJFEQp4G9:MYGFO1d7CxvDTQJFEQpD","tlshash":"b9f2f12eb65b01f5e7c597b9d0ff5313b6da1d912309a4c5a3e8f60089b03f8aec1819","first_seen":"2025-12-27T16:04:42.457422Z","last_seen":"2025-12-27T16:04:42.457422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"www.pacetonet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/css/stylespreloader.css","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/css/stylespreloader.css HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: text/css\r\ncontent-length: 691\r\nlast-modified: Sat, 15 Feb 2025 15:38:10 GMT\r\netag: \"67b0b4e2-2b3\"\r\nexpires: Sun, 28 Dec 2025 04:03:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":691,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fe653e0c033ae7330a0ea1064e799d57","sha1":"e83e9f56a86c7c6bc5b88a9622a3a9acb363d637","sha256":"00a1bfe7dc412ce44affcfa572dd5226b6bed765be2ba1a73370a231f31f3e3c","sha512":"c5cc73e47e6eac0e81f89ad43bd47e73bd7133eb172598e4a0c56f3f5ae34ba5c5be972ca37020603520788acd00e1c775fcea417435e9c9dc96b611a9a2bfb8","ssdeep":"","tlshash":"6001443001c2786ed30b432a2c69a2a4d63e900f9b5e2e5d752d653cd7478d451b73c0","first_seen":"2023-05-20T19:29:41Z","last_seen":"2026-04-18T09:31:25.449028Z","times_seen":525,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jn1680.com/webapp/js/lib/video/jisuft_video/images/car7.png","fqdn":"jn1680.com","domain":"jn1680.com","tld":"com"},"ip":{"addr":"34.150.127.114","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html","date":"2025-12-27T16:03:52.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.jn1680.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 06:30:36 GMT","end":"Thu, 19 Mar 2026 06:30:35 GMT"},"fingerprint":{"sha1":"B6:C3:3B:F1:AE:A9:27:1F:D2:FC:FA:20:D7:43:8E:CD:76:AA:12:69","sha256":"F6:95:16:C3:E6:32:08:04:A8:65:1F:F3:5B:A0:63:75:FA:8A:58:BC:B1:A4:86:21:03:60:B1:5B:33:68:9D:40"}}},"request":{"raw":"GET /webapp/js/lib/video/jisuft_video/images/car7.png HTTP/1.1\r\nHost: jn1680.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jn1680.com/webapp/js/lib/video/jisuft_video/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 16:03:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Feb 2025 15:38:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b0b4e4-6d1b\"\r\nexpires: Mon, 26 Jan 2026 16:03:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 53, 8-bit/color RGBA, non-interlaced","md5":"c1719fb4ef9b1b94f27ae6d01e34e50d","sha1":"69173f63447b9a0936ca78ff119ae442bea2927a","sha256":"617f024c71ee2acfea5920717c6e4dc662801eb5607a29f6d33047e6ac4e374f","sha512":"c1f536a04ac14a23603d2f42dbfe6dc3812f43ab7384909437590100b67868e200f968ae4edf5bb2abbf5d0bdac0f04e249b83832c603e5b51c4097411804731","ssdeep":"384:q6tu5B59sgsHsRsPoXiIaGOe4Ni2DN9EALRzBvWC8/:9tFoXiIr4I2J9f9dvo","tlshash":"b1c2a020baa4b9769ae8f07078d212c5ac564483ef80fd69b5ce88396f40fd45c4f9c6","first_seen":"2023-05-20T19:29:42Z","last_seen":"2026-04-18T09:31:25.581058Z","times_seen":537,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}