{"report_id":"5c426f4e-72fc-4e46-b4ab-3a2ee4680732","version":0,"status":"done","tags":[],"date":"2026-06-17T14:13:44Z","url":{"schema":"http","addr":"11365app.com","fqdn":"11365app.com","domain":"11365app.com","tld":"com"},"ip":{"addr":"45.144.136.33","port":0,"asn":139659,"as":"LUCIDACLOUD LIMITED","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"title":"2026美加墨世界杯","dom":{"size":33750,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (890)","md5":"b6737e6dcca11d10ee9b41e629a10f46","sha1":"50d35bb8718c8efe36ec606427a7576d4a3b9511","sha256":"8b43c6b2337378f7a1948b69c3ff65778a4e49ce9bbc91eb0e5cabb23c37ad7b","sha512":"34d975edaa22692fb343b32a6ec205ce235517466d265a9c4aaa7b8a143ffa7ab3521f95d311e391ca3d2d9fad136510ef67cc7bb2a51fd8ef9ddf4401a37afb","ssdeep":"384:PP6IwOZXUMJRZFIAptHAnNzPG0w3sbu9OQ2UPktR/zvlIJQ4j2ZOPavflwSZWByE:njoZtmBlXZu+","tlshash":"6de239f2038c5d2d4741a3836868725c407f5e76e8b1d9e3b4bb1826f9826e29d1d1ef","dom_hash":"domhash83dfc7161d11423a873811cc4c1f9f4e","first_seen":"2026-06-16T03:47:42.564786Z","last_seen":"2026-06-19T06:16:47.724339Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"11365app.com","fqdn":"11365app.com","domain":"11365app.com","tld":"com"},"ip":{"addr":"45.144.136.33","port":0,"asn":139659,"as":"LUCIDACLOUD LIMITED","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T14:13:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"1.21302132.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"11365app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"hg111222.cc","ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"domain_registered":"2025-11-29","domain_rank":0,"first_seen":"2025-11-29T14:03:47.337579Z","last_seen":"2026-06-16T03:47:36.664187Z","alert_count":90,"request_count":18,"received_data":283329,"sent_data":8936,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"node96.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":0,"first_seen":"2025-10-14T12:55:07.339111Z","last_seen":"2026-06-16T12:34:51.405922Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.xieziqi.com","ip":{"addr":"149.104.27.247","port":443,"asn":139659,"as":"LUCIDACLOUD LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2022-02-06","domain_rank":0,"first_seen":"2022-04-24T06:48:42Z","last_seen":"2026-06-16T03:47:36.639578Z","alert_count":0,"request_count":1,"received_data":343,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1.21302132.com","ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-10-07","domain_rank":0,"first_seen":"2025-05-18T12:30:10.023586Z","last_seen":"2026-06-16T03:47:35.995653Z","alert_count":2,"request_count":2,"received_data":3264,"sent_data":1137,"comment":"","tags":null,"fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"node94.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":0,"first_seen":"2025-08-10T13:29:04.56112Z","last_seen":"2026-06-14T17:32:12.043265Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ggfm.gzsy12348.com","ip":{"addr":"111.68.15.22","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-11","domain_rank":0,"first_seen":"2026-02-09T22:05:22.323291Z","last_seen":"2026-06-15T23:10:05.370029Z","alert_count":0,"request_count":1,"received_data":144,"sent_data":454,"comment":"","tags":null,"fingerprints":null},{"fqdn":"2.82873.com","ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2013-07-13","domain_rank":0,"first_seen":"2025-10-18T07:58:01.328086Z","last_seen":"2026-06-16T03:47:35.773646Z","alert_count":0,"request_count":8,"received_data":249531,"sent_data":4183,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"node93.aizhantj.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":2930956,"first_seen":"2025-06-07T21:55:48.499212Z","last_seen":"2026-06-10T23:15:39.087917Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"11365app.com","ip":{"addr":"45.144.136.33","port":443,"asn":139659,"as":"LUCIDACLOUD LIMITED","country":"United States","country_code":"US"},"domain_registered":"2025-12-14","domain_rank":0,"first_seen":"2026-06-16T12:34:50.701899Z","last_seen":"2026-06-16T12:34:50.701899Z","alert_count":6,"request_count":1,"received_data":268,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"11365app.com/","fqdn":"11365app.com","domain":"11365app.com","tld":"com"},"ip":{"addr":"45.144.136.33","port":443,"asn":139659,"as":"LUCIDACLOUD LIMITED","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98a3b5e3b0f9e4921d13bae4f7c100e3","sha1":"6b386005f4ee58260aab238ae1238ebda31c771d","sha256":"d103871a94c2ee55fb088a5df0a3eb01384a3deec536f8f1bbfc77c37a91a101","sha512":"8f8236ad30c2eabbf471413c71c2244cb2d41ff2ce4333fd3031a06020569161bff18d008b6c4b9016735c2726f1ee022d549b031331341ed07aa1d4f5c5dd06","ssdeep":"","tlshash":"fc9002d71211010816e1109589463d48a15310ee0c6e50118010442011053ae1157585","size":45,"data":"","first_seen":"2026-06-16T03:47:42.596224Z","last_seen":"2026-06-19T06:16:47.756373Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4f219850155470bf2b5e4de8f964d5","sha1":"024f32085101a3b9d2206f15ab416ea15d8f048f","sha256":"605766fde67b97327832fdaba440901d291d9cecaa5df2ddec8faa3a4360f52f","sha512":"5d960384eb0231a791b75ce4c69257e578d9d5ba9abfae769fcb5fbb6fb93f3e407eed1a36b6b88b2b990b4e93a854ca621f404f7f57206926ad35ff217b8d0a","ssdeep":"","tlshash":"f1c02b647e514634030840d7303fc7593df329341c25c110469fcc6c6610fc344d1430","size":148,"data":"","first_seen":"2026-02-09T22:05:35.519802Z","last_seen":"2026-07-18T16:24:33.414273Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f8bc54b8b95e4d2d683ea12eda5695","sha1":"a82a27934822ee6b075235aa3346413967c1947b","sha256":"2b260c5ef51a911a341815bb0e5a1d6f108815cfc4e1319280e5a2216e65bb57","sha512":"b849bf82537657a39c9a112fb035a29890a6734b089c27da05dfc68326b885734046fea793dc294e17c8c748f9a284ae85ffdf9f229a0a8a939eb3a10d75d444","ssdeep":"","tlshash":"1ac080de3944497117d81477517ac65db4313068551a9021ccdfc8457924ff7845ff4c","size":190,"data":"","first_seen":"2025-05-18T12:30:21.087656Z","last_seen":"2026-07-05T07:34:53.644265Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"198f51dd038bf0afa2869ea23c2c93d3","sha1":"2df7501688416fe3f476af62d894aa6137db0f9a","sha256":"15fd804a399f1eb8c3a1f09c6e907532d77382b552a126c2475439166dbd91c7","sha512":"f34626f2793f9e39d48341b28726179084ffd8460788df29b57c31f6bf926e6c61fe4782caeab061cdf60bc856676c09ff364166da22bbe830d9f2d8ddf36af1","ssdeep":"","tlshash":"7721ed73d38c60270b1244c8e929bf9d518b5235fe535e12be7592eb6fc1e32821268d","size":1436,"data":"","first_seen":"2026-06-16T03:47:42.601462Z","last_seen":"2026-06-19T06:16:47.759346Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a00edf91b71ae742bd691c0830f8dba7","sha1":"6516fd5cfa6776543cdb62adf873ce4fdf410ebd","sha256":"1a058050b33716df1d1c2e9281763805fe7f56970a63656ab60e2a77a3ee8902","sha512":"f44d650e708effb6758468dcea5c0851b224af7bd7bf3897b4189356a7bacff02846cc3157a9541b581060d1404903566ed0e613f488d6bf9adef4ab8123e830","ssdeep":"","tlshash":"d7d0954f3dd004f1f3570069096fd2c970115018188ed5004ccdc5d55c10dd5096968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.603268Z","last_seen":"2026-06-19T06:16:47.760992Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed58647840c476c895e68d5da9c53f6d","sha1":"4b30442ce9f50e38ba65e6f1dea7b01245de36c1","sha256":"4f82b9b613e278f766ab03b505e1684615b7fce450f65de00984e418f07ae378","sha512":"10f112227b7798383e4459ee2e7c13b22e691dcefaa2bc8de3cf460b5e45884bb5445270a4692361665c31a21a8ad16019a10ae9f59ec4a14e8cc62e8649620c","ssdeep":"","tlshash":"8dd0954f3cc004b5f36700a8086fc249702190152c8ec50144cdc5e69d10dd4095968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.605399Z","last_seen":"2026-06-19T06:16:47.765285Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abd8a6ea9e37cb8f0d673f3495f63dd","sha1":"df07da683ce9973f3412897c479677c7cefade0a","sha256":"d4411a4aa4bdf6e424295c80ff80c58e6f63c9fef05e43ba0dd7ea79c0f92a55","sha512":"f60ac68ad28691ad39b93b087dfb0ba48a95e98900b2e5bcdc7803655724376a6f23088b971c07237c7f2d7c7112d00746961cb78a6dfb14c23f8fb2906096fc","ssdeep":"","tlshash":"acd0954e3dc018b5f39b08e919ffc249b0215015188fc51044ccc5d65d10de409ed6cc","size":253,"data":"","first_seen":"2026-06-16T03:47:42.60689Z","last_seen":"2026-06-19T06:16:47.765882Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4f219850155470bf2b5e4de8f964d5","sha1":"024f32085101a3b9d2206f15ab416ea15d8f048f","sha256":"605766fde67b97327832fdaba440901d291d9cecaa5df2ddec8faa3a4360f52f","sha512":"5d960384eb0231a791b75ce4c69257e578d9d5ba9abfae769fcb5fbb6fb93f3e407eed1a36b6b88b2b990b4e93a854ca621f404f7f57206926ad35ff217b8d0a","ssdeep":"","tlshash":"f1c02b647e514634030840d7303fc7593df329341c25c110469fcc6c6610fc344d1430","size":148,"data":"","first_seen":"2026-02-09T22:05:35.519802Z","last_seen":"2026-07-18T16:24:33.414273Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f8bc54b8b95e4d2d683ea12eda5695","sha1":"a82a27934822ee6b075235aa3346413967c1947b","sha256":"2b260c5ef51a911a341815bb0e5a1d6f108815cfc4e1319280e5a2216e65bb57","sha512":"b849bf82537657a39c9a112fb035a29890a6734b089c27da05dfc68326b885734046fea793dc294e17c8c748f9a284ae85ffdf9f229a0a8a939eb3a10d75d444","ssdeep":"","tlshash":"1ac080de3944497117d81477517ac65db4313068551a9021ccdfc8457924ff7845ff4c","size":190,"data":"","first_seen":"2025-05-18T12:30:21.087656Z","last_seen":"2026-07-05T07:34:53.644265Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"198f51dd038bf0afa2869ea23c2c93d3","sha1":"2df7501688416fe3f476af62d894aa6137db0f9a","sha256":"15fd804a399f1eb8c3a1f09c6e907532d77382b552a126c2475439166dbd91c7","sha512":"f34626f2793f9e39d48341b28726179084ffd8460788df29b57c31f6bf926e6c61fe4782caeab061cdf60bc856676c09ff364166da22bbe830d9f2d8ddf36af1","ssdeep":"","tlshash":"7721ed73d38c60270b1244c8e929bf9d518b5235fe535e12be7592eb6fc1e32821268d","size":1436,"data":"","first_seen":"2026-06-16T03:47:42.601462Z","last_seen":"2026-06-19T06:16:47.759346Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a00edf91b71ae742bd691c0830f8dba7","sha1":"6516fd5cfa6776543cdb62adf873ce4fdf410ebd","sha256":"1a058050b33716df1d1c2e9281763805fe7f56970a63656ab60e2a77a3ee8902","sha512":"f44d650e708effb6758468dcea5c0851b224af7bd7bf3897b4189356a7bacff02846cc3157a9541b581060d1404903566ed0e613f488d6bf9adef4ab8123e830","ssdeep":"","tlshash":"d7d0954f3dd004f1f3570069096fd2c970115018188ed5004ccdc5d55c10dd5096968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.603268Z","last_seen":"2026-06-19T06:16:47.760992Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed58647840c476c895e68d5da9c53f6d","sha1":"4b30442ce9f50e38ba65e6f1dea7b01245de36c1","sha256":"4f82b9b613e278f766ab03b505e1684615b7fce450f65de00984e418f07ae378","sha512":"10f112227b7798383e4459ee2e7c13b22e691dcefaa2bc8de3cf460b5e45884bb5445270a4692361665c31a21a8ad16019a10ae9f59ec4a14e8cc62e8649620c","ssdeep":"","tlshash":"8dd0954f3cc004b5f36700a8086fc249702190152c8ec50144cdc5e69d10dd4095968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.605399Z","last_seen":"2026-06-19T06:16:47.765285Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abd8a6ea9e37cb8f0d673f3495f63dd","sha1":"df07da683ce9973f3412897c479677c7cefade0a","sha256":"d4411a4aa4bdf6e424295c80ff80c58e6f63c9fef05e43ba0dd7ea79c0f92a55","sha512":"f60ac68ad28691ad39b93b087dfb0ba48a95e98900b2e5bcdc7803655724376a6f23088b971c07237c7f2d7c7112d00746961cb78a6dfb14c23f8fb2906096fc","ssdeep":"","tlshash":"acd0954e3dc018b5f39b08e919ffc249b0215015188fc51044ccc5d65d10de409ed6cc","size":253,"data":"","first_seen":"2026-06-16T03:47:42.60689Z","last_seen":"2026-06-19T06:16:47.765882Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4f219850155470bf2b5e4de8f964d5","sha1":"024f32085101a3b9d2206f15ab416ea15d8f048f","sha256":"605766fde67b97327832fdaba440901d291d9cecaa5df2ddec8faa3a4360f52f","sha512":"5d960384eb0231a791b75ce4c69257e578d9d5ba9abfae769fcb5fbb6fb93f3e407eed1a36b6b88b2b990b4e93a854ca621f404f7f57206926ad35ff217b8d0a","ssdeep":"","tlshash":"f1c02b647e514634030840d7303fc7593df329341c25c110469fcc6c6610fc344d1430","size":148,"data":"","first_seen":"2026-02-09T22:05:35.519802Z","last_seen":"2026-07-18T16:24:33.414273Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f8bc54b8b95e4d2d683ea12eda5695","sha1":"a82a27934822ee6b075235aa3346413967c1947b","sha256":"2b260c5ef51a911a341815bb0e5a1d6f108815cfc4e1319280e5a2216e65bb57","sha512":"b849bf82537657a39c9a112fb035a29890a6734b089c27da05dfc68326b885734046fea793dc294e17c8c748f9a284ae85ffdf9f229a0a8a939eb3a10d75d444","ssdeep":"","tlshash":"1ac080de3944497117d81477517ac65db4313068551a9021ccdfc8457924ff7845ff4c","size":190,"data":"","first_seen":"2025-05-18T12:30:21.087656Z","last_seen":"2026-07-05T07:34:53.644265Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"198f51dd038bf0afa2869ea23c2c93d3","sha1":"2df7501688416fe3f476af62d894aa6137db0f9a","sha256":"15fd804a399f1eb8c3a1f09c6e907532d77382b552a126c2475439166dbd91c7","sha512":"f34626f2793f9e39d48341b28726179084ffd8460788df29b57c31f6bf926e6c61fe4782caeab061cdf60bc856676c09ff364166da22bbe830d9f2d8ddf36af1","ssdeep":"","tlshash":"7721ed73d38c60270b1244c8e929bf9d518b5235fe535e12be7592eb6fc1e32821268d","size":1436,"data":"","first_seen":"2026-06-16T03:47:42.601462Z","last_seen":"2026-06-19T06:16:47.759346Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a00edf91b71ae742bd691c0830f8dba7","sha1":"6516fd5cfa6776543cdb62adf873ce4fdf410ebd","sha256":"1a058050b33716df1d1c2e9281763805fe7f56970a63656ab60e2a77a3ee8902","sha512":"f44d650e708effb6758468dcea5c0851b224af7bd7bf3897b4189356a7bacff02846cc3157a9541b581060d1404903566ed0e613f488d6bf9adef4ab8123e830","ssdeep":"","tlshash":"d7d0954f3dd004f1f3570069096fd2c970115018188ed5004ccdc5d55c10dd5096968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.603268Z","last_seen":"2026-06-19T06:16:47.760992Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed58647840c476c895e68d5da9c53f6d","sha1":"4b30442ce9f50e38ba65e6f1dea7b01245de36c1","sha256":"4f82b9b613e278f766ab03b505e1684615b7fce450f65de00984e418f07ae378","sha512":"10f112227b7798383e4459ee2e7c13b22e691dcefaa2bc8de3cf460b5e45884bb5445270a4692361665c31a21a8ad16019a10ae9f59ec4a14e8cc62e8649620c","ssdeep":"","tlshash":"8dd0954f3cc004b5f36700a8086fc249702190152c8ec50144cdc5e69d10dd4095968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.605399Z","last_seen":"2026-06-19T06:16:47.765285Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abd8a6ea9e37cb8f0d673f3495f63dd","sha1":"df07da683ce9973f3412897c479677c7cefade0a","sha256":"d4411a4aa4bdf6e424295c80ff80c58e6f63c9fef05e43ba0dd7ea79c0f92a55","sha512":"f60ac68ad28691ad39b93b087dfb0ba48a95e98900b2e5bcdc7803655724376a6f23088b971c07237c7f2d7c7112d00746961cb78a6dfb14c23f8fb2906096fc","ssdeep":"","tlshash":"acd0954e3dc018b5f39b08e919ffc249b0215015188fc51044ccc5d65d10de409ed6cc","size":253,"data":"","first_seen":"2026-06-16T03:47:42.60689Z","last_seen":"2026-06-19T06:16:47.765882Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/static/js/jquery1.7.2.min.js","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"98c11854e7b616fd7dbf91b4dc0b95a3","sha1":"8f96c2653eda7d534000a85eaf1c11a5e8a87fe9","sha256":"9f3dc5d41c8ef4a2b25bb72dfa0759ee1cf5b52ce81226553135e6527baa4cd6","sha512":"9797243fcf523dbc72edaf28373e27463030426ab3cbc3a83fd2fcb1b12c403eb8b7c5a4bf29a0710e221f0092c23b9a337c09247806a193b97179ddf38aa6fb","ssdeep":"3072:MejOErZKJURMVe2uSi4zNsgZoM//aijapXKJRCc2Rm1ExK0SawqgRGebsPdfdFaP:lOErZKJURMVe2uSi4zNsLi+pXIC4ExKL","tlshash":"8d043199b6d5207a9533f33ece7fc905f576496b129488467d3ca4a42f3081086bafec","size":178129,"data":"","first_seen":"2023-04-05T01:51:16Z","last_seen":"2026-06-19T06:16:47.737095Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/kj.html?lhc=am","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-05T21:34:05.78477Z","times_seen":237102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/kj.html?lhc=am","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-05T22:01:57.445041Z","times_seen":738641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4f219850155470bf2b5e4de8f964d5","sha1":"024f32085101a3b9d2206f15ab416ea15d8f048f","sha256":"605766fde67b97327832fdaba440901d291d9cecaa5df2ddec8faa3a4360f52f","sha512":"5d960384eb0231a791b75ce4c69257e578d9d5ba9abfae769fcb5fbb6fb93f3e407eed1a36b6b88b2b990b4e93a854ca621f404f7f57206926ad35ff217b8d0a","ssdeep":"","tlshash":"f1c02b647e514634030840d7303fc7593df329341c25c110469fcc6c6610fc344d1430","size":148,"data":"","first_seen":"2026-02-09T22:05:35.519802Z","last_seen":"2026-07-18T16:24:33.414273Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f8bc54b8b95e4d2d683ea12eda5695","sha1":"a82a27934822ee6b075235aa3346413967c1947b","sha256":"2b260c5ef51a911a341815bb0e5a1d6f108815cfc4e1319280e5a2216e65bb57","sha512":"b849bf82537657a39c9a112fb035a29890a6734b089c27da05dfc68326b885734046fea793dc294e17c8c748f9a284ae85ffdf9f229a0a8a939eb3a10d75d444","ssdeep":"","tlshash":"1ac080de3944497117d81477517ac65db4313068551a9021ccdfc8457924ff7845ff4c","size":190,"data":"","first_seen":"2025-05-18T12:30:21.087656Z","last_seen":"2026-07-05T07:34:53.644265Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"198f51dd038bf0afa2869ea23c2c93d3","sha1":"2df7501688416fe3f476af62d894aa6137db0f9a","sha256":"15fd804a399f1eb8c3a1f09c6e907532d77382b552a126c2475439166dbd91c7","sha512":"f34626f2793f9e39d48341b28726179084ffd8460788df29b57c31f6bf926e6c61fe4782caeab061cdf60bc856676c09ff364166da22bbe830d9f2d8ddf36af1","ssdeep":"","tlshash":"7721ed73d38c60270b1244c8e929bf9d518b5235fe535e12be7592eb6fc1e32821268d","size":1436,"data":"","first_seen":"2026-06-16T03:47:42.601462Z","last_seen":"2026-06-19T06:16:47.759346Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a00edf91b71ae742bd691c0830f8dba7","sha1":"6516fd5cfa6776543cdb62adf873ce4fdf410ebd","sha256":"1a058050b33716df1d1c2e9281763805fe7f56970a63656ab60e2a77a3ee8902","sha512":"f44d650e708effb6758468dcea5c0851b224af7bd7bf3897b4189356a7bacff02846cc3157a9541b581060d1404903566ed0e613f488d6bf9adef4ab8123e830","ssdeep":"","tlshash":"d7d0954f3dd004f1f3570069096fd2c970115018188ed5004ccdc5d55c10dd5096968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.603268Z","last_seen":"2026-06-19T06:16:47.760992Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed58647840c476c895e68d5da9c53f6d","sha1":"4b30442ce9f50e38ba65e6f1dea7b01245de36c1","sha256":"4f82b9b613e278f766ab03b505e1684615b7fce450f65de00984e418f07ae378","sha512":"10f112227b7798383e4459ee2e7c13b22e691dcefaa2bc8de3cf460b5e45884bb5445270a4692361665c31a21a8ad16019a10ae9f59ec4a14e8cc62e8649620c","ssdeep":"","tlshash":"8dd0954f3cc004b5f36700a8086fc249702190152c8ec50144cdc5e69d10dd4095968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.605399Z","last_seen":"2026-06-19T06:16:47.765285Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abd8a6ea9e37cb8f0d673f3495f63dd","sha1":"df07da683ce9973f3412897c479677c7cefade0a","sha256":"d4411a4aa4bdf6e424295c80ff80c58e6f63c9fef05e43ba0dd7ea79c0f92a55","sha512":"f60ac68ad28691ad39b93b087dfb0ba48a95e98900b2e5bcdc7803655724376a6f23088b971c07237c7f2d7c7112d00746961cb78a6dfb14c23f8fb2906096fc","ssdeep":"","tlshash":"acd0954e3dc018b5f39b08e919ffc249b0215015188fc51044ccc5d65d10de409ed6cc","size":253,"data":"","first_seen":"2026-06-16T03:47:42.60689Z","last_seen":"2026-06-19T06:16:47.765882Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4f219850155470bf2b5e4de8f964d5","sha1":"024f32085101a3b9d2206f15ab416ea15d8f048f","sha256":"605766fde67b97327832fdaba440901d291d9cecaa5df2ddec8faa3a4360f52f","sha512":"5d960384eb0231a791b75ce4c69257e578d9d5ba9abfae769fcb5fbb6fb93f3e407eed1a36b6b88b2b990b4e93a854ca621f404f7f57206926ad35ff217b8d0a","ssdeep":"","tlshash":"f1c02b647e514634030840d7303fc7593df329341c25c110469fcc6c6610fc344d1430","size":148,"data":"","first_seen":"2026-02-09T22:05:35.519802Z","last_seen":"2026-07-18T16:24:33.414273Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f8bc54b8b95e4d2d683ea12eda5695","sha1":"a82a27934822ee6b075235aa3346413967c1947b","sha256":"2b260c5ef51a911a341815bb0e5a1d6f108815cfc4e1319280e5a2216e65bb57","sha512":"b849bf82537657a39c9a112fb035a29890a6734b089c27da05dfc68326b885734046fea793dc294e17c8c748f9a284ae85ffdf9f229a0a8a939eb3a10d75d444","ssdeep":"","tlshash":"1ac080de3944497117d81477517ac65db4313068551a9021ccdfc8457924ff7845ff4c","size":190,"data":"","first_seen":"2025-05-18T12:30:21.087656Z","last_seen":"2026-07-05T07:34:53.644265Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"198f51dd038bf0afa2869ea23c2c93d3","sha1":"2df7501688416fe3f476af62d894aa6137db0f9a","sha256":"15fd804a399f1eb8c3a1f09c6e907532d77382b552a126c2475439166dbd91c7","sha512":"f34626f2793f9e39d48341b28726179084ffd8460788df29b57c31f6bf926e6c61fe4782caeab061cdf60bc856676c09ff364166da22bbe830d9f2d8ddf36af1","ssdeep":"","tlshash":"7721ed73d38c60270b1244c8e929bf9d518b5235fe535e12be7592eb6fc1e32821268d","size":1436,"data":"","first_seen":"2026-06-16T03:47:42.601462Z","last_seen":"2026-06-19T06:16:47.759346Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a00edf91b71ae742bd691c0830f8dba7","sha1":"6516fd5cfa6776543cdb62adf873ce4fdf410ebd","sha256":"1a058050b33716df1d1c2e9281763805fe7f56970a63656ab60e2a77a3ee8902","sha512":"f44d650e708effb6758468dcea5c0851b224af7bd7bf3897b4189356a7bacff02846cc3157a9541b581060d1404903566ed0e613f488d6bf9adef4ab8123e830","ssdeep":"","tlshash":"d7d0954f3dd004f1f3570069096fd2c970115018188ed5004ccdc5d55c10dd5096968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.603268Z","last_seen":"2026-06-19T06:16:47.760992Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed58647840c476c895e68d5da9c53f6d","sha1":"4b30442ce9f50e38ba65e6f1dea7b01245de36c1","sha256":"4f82b9b613e278f766ab03b505e1684615b7fce450f65de00984e418f07ae378","sha512":"10f112227b7798383e4459ee2e7c13b22e691dcefaa2bc8de3cf460b5e45884bb5445270a4692361665c31a21a8ad16019a10ae9f59ec4a14e8cc62e8649620c","ssdeep":"","tlshash":"8dd0954f3cc004b5f36700a8086fc249702190152c8ec50144cdc5e69d10dd4095968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.605399Z","last_seen":"2026-06-19T06:16:47.765285Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abd8a6ea9e37cb8f0d673f3495f63dd","sha1":"df07da683ce9973f3412897c479677c7cefade0a","sha256":"d4411a4aa4bdf6e424295c80ff80c58e6f63c9fef05e43ba0dd7ea79c0f92a55","sha512":"f60ac68ad28691ad39b93b087dfb0ba48a95e98900b2e5bcdc7803655724376a6f23088b971c07237c7f2d7c7112d00746961cb78a6dfb14c23f8fb2906096fc","ssdeep":"","tlshash":"acd0954e3dc018b5f39b08e919ffc249b0215015188fc51044ccc5d65d10de409ed6cc","size":253,"data":"","first_seen":"2026-06-16T03:47:42.60689Z","last_seen":"2026-06-19T06:16:47.765882Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed4f219850155470bf2b5e4de8f964d5","sha1":"024f32085101a3b9d2206f15ab416ea15d8f048f","sha256":"605766fde67b97327832fdaba440901d291d9cecaa5df2ddec8faa3a4360f52f","sha512":"5d960384eb0231a791b75ce4c69257e578d9d5ba9abfae769fcb5fbb6fb93f3e407eed1a36b6b88b2b990b4e93a854ca621f404f7f57206926ad35ff217b8d0a","ssdeep":"","tlshash":"f1c02b647e514634030840d7303fc7593df329341c25c110469fcc6c6610fc344d1430","size":148,"data":"","first_seen":"2026-02-09T22:05:35.519802Z","last_seen":"2026-07-18T16:24:33.414273Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f8bc54b8b95e4d2d683ea12eda5695","sha1":"a82a27934822ee6b075235aa3346413967c1947b","sha256":"2b260c5ef51a911a341815bb0e5a1d6f108815cfc4e1319280e5a2216e65bb57","sha512":"b849bf82537657a39c9a112fb035a29890a6734b089c27da05dfc68326b885734046fea793dc294e17c8c748f9a284ae85ffdf9f229a0a8a939eb3a10d75d444","ssdeep":"","tlshash":"1ac080de3944497117d81477517ac65db4313068551a9021ccdfc8457924ff7845ff4c","size":190,"data":"","first_seen":"2025-05-18T12:30:21.087656Z","last_seen":"2026-07-05T07:34:53.644265Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"198f51dd038bf0afa2869ea23c2c93d3","sha1":"2df7501688416fe3f476af62d894aa6137db0f9a","sha256":"15fd804a399f1eb8c3a1f09c6e907532d77382b552a126c2475439166dbd91c7","sha512":"f34626f2793f9e39d48341b28726179084ffd8460788df29b57c31f6bf926e6c61fe4782caeab061cdf60bc856676c09ff364166da22bbe830d9f2d8ddf36af1","ssdeep":"","tlshash":"7721ed73d38c60270b1244c8e929bf9d518b5235fe535e12be7592eb6fc1e32821268d","size":1436,"data":"","first_seen":"2026-06-16T03:47:42.601462Z","last_seen":"2026-06-19T06:16:47.759346Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a00edf91b71ae742bd691c0830f8dba7","sha1":"6516fd5cfa6776543cdb62adf873ce4fdf410ebd","sha256":"1a058050b33716df1d1c2e9281763805fe7f56970a63656ab60e2a77a3ee8902","sha512":"f44d650e708effb6758468dcea5c0851b224af7bd7bf3897b4189356a7bacff02846cc3157a9541b581060d1404903566ed0e613f488d6bf9adef4ab8123e830","ssdeep":"","tlshash":"d7d0954f3dd004f1f3570069096fd2c970115018188ed5004ccdc5d55c10dd5096968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.603268Z","last_seen":"2026-06-19T06:16:47.760992Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed58647840c476c895e68d5da9c53f6d","sha1":"4b30442ce9f50e38ba65e6f1dea7b01245de36c1","sha256":"4f82b9b613e278f766ab03b505e1684615b7fce450f65de00984e418f07ae378","sha512":"10f112227b7798383e4459ee2e7c13b22e691dcefaa2bc8de3cf460b5e45884bb5445270a4692361665c31a21a8ad16019a10ae9f59ec4a14e8cc62e8649620c","ssdeep":"","tlshash":"8dd0954f3cc004b5f36700a8086fc249702190152c8ec50144cdc5e69d10dd4095968c","size":253,"data":"","first_seen":"2026-06-16T03:47:42.605399Z","last_seen":"2026-06-19T06:16:47.765285Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1abd8a6ea9e37cb8f0d673f3495f63dd","sha1":"df07da683ce9973f3412897c479677c7cefade0a","sha256":"d4411a4aa4bdf6e424295c80ff80c58e6f63c9fef05e43ba0dd7ea79c0f92a55","sha512":"f60ac68ad28691ad39b93b087dfb0ba48a95e98900b2e5bcdc7803655724376a6f23088b971c07237c7f2d7c7112d00746961cb78a6dfb14c23f8fb2906096fc","ssdeep":"","tlshash":"acd0954e3dc018b5f39b08e919ffc249b0215015188fc51044ccc5d65d10de409ed6cc","size":253,"data":"","first_seen":"2026-06-16T03:47:42.60689Z","last_seen":"2026-06-19T06:16:47.765882Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.21302132.com/tongji/?v=1.2","fqdn":"1.21302132.com","domain":"21302132.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a134a85b3131ce0b2c7520b22b2a10f1","sha1":"97b71324fd3da0e3d51c13bcec4a87cc43020fba","sha256":"a7fdf086f155bf92a004e4a00557b72d69914a2f0d92be88db766ef95d0f2d65","sha512":"faf5c8ae6a2fe9e3fecd69cc9bbfb995f95a518e9d12cc4258ce23e1e5aa44d964b0d435c357357e8c13a311e7b39a9ad2f94a4c9d5101487993610af3a1ecdb","ssdeep":"","tlshash":"6651df9955a2e3e604b377dfaf6fa303b4654107384bc4263d5c00892f2346be1d87d9","size":2800,"data":"","first_seen":"2025-05-18T12:30:21.04523Z","last_seen":"2026-07-01T01:15:42.322845Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/kj.html?lhc=am","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"b257bccc98fdec9911708e9b2c7b18f4","sha1":"7aa8336175f6ddf880e0c7765bf7ecc841e1d5aa","sha256":"555185f0b48bb1ccd2bd621d9166e1fa569f0097cf1f21b58a01ee112cda9460","sha512":"ad62aa9160738c79041c4c912f44372fc62258e2aeca9a633a17b398c2e854b7ee0a15a48320ffe557a311e5d99fa17ece4493d36bd1c449e3241f041c7efae1","ssdeep":"768:TEg4QmXBoOQX8eguDUgLNbbOC1vXmHMth6p/nYcWgfjnnV/9dco5dZxFom42PQvw:OHnAS1vuMD2iZg+UU1MxS4N5TRDIWqBv","tlshash":"6f431f8576c1f407138f0b73bb17aaf6e42b4ca971c4544bf268b998f4a8607d6e1db0","size":59397,"data":"","first_seen":"2026-06-16T03:47:42.592106Z","last_seen":"2026-06-19T06:16:47.769304Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"2.82873.com/kj.html?lhc=am","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.853Z","timestamp":1781705604853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /kj.html?lhc=am HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 21 Feb 2026 04:09:19 GMT\r\naccept-ranges: bytes\r\netag: \"aec257dae7a2dc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:26 GMT\r\ncontent-length: 27567\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":68802,"size_decoded":27880,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54316), with CRLF line terminators","md5":"4b16721f00ae710bc1709ecb5f9feacd","sha1":"bc6b512c5d4c5d87d975e7cbc0e2225f6130412f","sha256":"09fc858202b14b2bd9bb712fdaecbd7279620c18b3ef9a0eeb467a5654295b81","sha512":"90c0ef69e666fe48237893dabb745a381dcca52bdc280e17062ceb3d0e932a7097ed67879b760adc04e1de85d0c018f4f66e92342289ecf345eba1fe128a9be5","ssdeep":"768:7rg4QmXBoOQX8eguDUgLNbbOC1vXmHMth6p/nYcWgfjnnV/9dco5dZxFom42PQvV:ZHnAS1vuMD2iZg+UU1MxS4N5TRDIWqBM","tlshash":"0b63438576c1f403139f0763bf17aae5e52b48aa7184140bf2acb985fbb8607d5d2db0","first_seen":"2026-03-29T08:37:55.25544Z","last_seen":"2026-06-19T06:16:47.749826Z","times_seen":50,"resource_available":false,"data":null}},"time_used":2169,"timings":{"blocked":-1,"dns":88,"connect":231,"send":0,"wait":467,"receive":231,"ssl":1152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/apikj.php?lx=am\u0026?1781705615009","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:35.012Z","timestamp":1781705615012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /apikj.php?lx=am\u0026?1781705615009 HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/kj.html?lhc=am\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/5.6.40, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:35 GMT\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":84,"size_decoded":448,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0b3ef7f894e2aa93880efea9edf5b634","sha1":"c3a0cb7598d8a8ca49e69b00ea739534bfdfaeb0","sha256":"7f4448bc8fc2083824a713cec796c459ecdaed123c5426d8f9e469351e1b6fd4","sha512":"d10b95ade2f627aa04b5d78a647f91d61034429b667e171626e9f2d4c11ae3d44fa8371dbc698211507c7f8b00ae3c7ab96b879ce7becce2e3bea8475d0ffb65","ssdeep":"","tlshash":"95a01206c3097114325300c09d92105103bd700284a08701eda069c11548527065adf3","first_seen":"2026-06-17T14:13:52.019658Z","last_seen":"2026-06-17T14:13:52.019658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T14:13:22.001Z","timestamp":1781705602001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://11365app.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 07 Jun 2026 06:20:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a250da8-822c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33489,"size_decoded":8236,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (890)","md5":"e37ceaaef0bcfe048c49de777623026b","sha1":"23e0b4bee82050a598ba2260944426d679adc20a","sha256":"e38679bdd28c18d02124f296b01c290afab080fb628c7fdc7415a589b928c3a1","sha512":"3b667d4dbd27111733080f8796ba2540075bf17086a2ec417383a861fb76b7585155579e271d2e5c108ac3d6428b80845d3bbbc90c34a498e434afde682fec35","ssdeep":"384:Ot6IwOZXUMJRZFIAptHAnNzPG0w3sbu9OQ2UPktR/zvlIJQ4j2ZOPavflwSZWBy8:ejoZtmBlXZuW","tlshash":"b6e229f2038c6d2d4741a3836868725c407f5e76e8b1d9e3b4bb1826f9816e29d1d1ef","first_seen":"2026-06-16T03:47:42.590654Z","last_seen":"2026-06-19T06:16:47.727551Z","times_seen":6,"resource_available":true,"data":null}},"time_used":2217,"timings":{"blocked":-1,"dns":249,"connect":246,"send":0,"wait":246,"receive":0,"ssl":1476},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/pop.css","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.565Z","timestamp":1781705604565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/pop.css HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688f4a80-718\"\r\nexpires: Thu, 18 Jun 2026 02:13:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1816,"size_decoded":1312,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"74cf664123c47570d3ad19b8f91b6f48","sha1":"fea379be0812f021fee048fda51706774daa9e78","sha256":"f99bb48fc21cf5cfb4a1fae7364f941bfaa6561727a2f152b7f4bbef4e7903a9","sha512":"0c4b2000050e14a7b93b0f35cd57718d7098198376730cc10815e67a1f9c927847314bf9ba5f17c58becab669dbdbc9f522fd63a4b205412a06c27c85cc683ca","ssdeep":"","tlshash":"673110216681104a713bc49073f645b8da38c503b1130baef3d4b7b0afe18929274a97","first_seen":"2025-10-18T07:58:07.613405Z","last_seen":"2026-06-19T06:16:47.748296Z","times_seen":62,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/jquery1.7.2.min(1).js.%E4%B8%8B%E8%BD%BD","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.566Z","timestamp":1781705604566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/jquery1.7.2.min(1).js.%E4%B8%8B%E8%BD%BD HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311,"size_decoded":399,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e0949e6a5244f833129eecb67db2d225","sha1":"84afb40b38250446be018a0b6618fe3ee33dd676","sha256":"c1526b6f29e936c91b98c51ff2c98d38d467a51a35897bb79b00ac59c9ece120","sha512":"a1f4910326f0a6a3dd104d9f223651580dfefda710179401e852b17315f6224db4811187496dbf010c2191888f7323e9bb599d82e46528c39de885551d95d157","ssdeep":"","tlshash":"cbe0726c3e12ae28065320b632f7e358e8e3223a2c2ac1100489c85b72867d68dc2321","first_seen":"2026-02-09T22:05:35.509612Z","last_seen":"2026-07-14T23:30:54.589228Z","times_seen":86,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/bet365.gif","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.807Z","timestamp":1781705604807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /bet365.gif HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/gif\r\nlast-modified: Sun, 12 Apr 2026 14:28:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69dbac28-aa56\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43606,"size_decoded":43543,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 90","md5":"3216dcd42fd9916559d3fd5ed2f65184","sha1":"b821a3075d9ef5b2baf8ba84f4e68c84f932f68b","sha256":"c68b21ede44e194c7d506b927c8d77d95a674ec60233bfa04dd042646fb0b6c2","sha512":"d70246ee298f9c1704fd7990140a44c185c50168eb412277a5b74c08faa8ec575ae4e03148c3233b490718de3a9ba34fdafccfc004b99f89ac5f080fe77b5178","ssdeep":"768:LJyirFP44tHVxVXe02Z8PSbNrQfm66zUgT7YV09xWwI86S8S2D:LJyir54+1xVX2+PSbNrQfGN4VSxWmw","tlshash":"8513f18da9d8655ef39df98651afedec290ad8d2cf9c8b0213076a53430cc7168d0bb5","first_seen":"2026-02-04T07:47:53.87459Z","last_seen":"2026-06-19T06:16:47.729783Z","times_seen":49,"resource_available":false,"data":null}},"time_used":2213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.kuaidi.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.848Z","timestamp":1781705604848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.kuaidi.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688f4a80-149e\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5278,"size_decoded":5821,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"32a70795f6122d340ad07af61e03e0c3","sha1":"994425391f738e7972f55d82ded61ab194e79a29","sha256":"f7ea75bfb12c94a678c31b061c8544aaf5638dd39a7051fc32dc6c0f5f93f78f","sha512":"180189c95c635f28b8bf2a9d25316295d88dab6ab4921671e595f5fad44824d4be741da6bb05200e2dbb7864f63d594c82997f429e50abcdfa4341570bd82320","ssdeep":"96:EJC29NqJSr/h466eI0TY/qE7nb4gpQtXENHQTsD05x3phW+7rc8U:EY29Nog+eTE/p4UQtUeTs45Zpg","tlshash":"e9b19e9ebbb231d8f7325799572a2104f3de12534d0b5a1f9d096ef862d6806648c2c2","first_seen":"2023-05-27T06:40:11Z","last_seen":"2026-07-22T23:25:36.960902Z","times_seen":1239,"resource_available":false,"data":null}},"time_used":2664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/favicon.ico","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:28.399Z","timestamp":1781705608399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nCookie: _CLTJ_faa4=VkFHL5T2Zr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:28 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311,"size_decoded":399,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e0949e6a5244f833129eecb67db2d225","sha1":"84afb40b38250446be018a0b6618fe3ee33dd676","sha256":"c1526b6f29e936c91b98c51ff2c98d38d467a51a35897bb79b00ac59c9ece120","sha512":"a1f4910326f0a6a3dd104d9f223651580dfefda710179401e852b17315f6224db4811187496dbf010c2191888f7323e9bb599d82e46528c39de885551d95d157","ssdeep":"","tlshash":"cbe0726c3e12ae28065320b632f7e358e8e3223a2c2ac1100489c85b72867d68dc2321","first_seen":"2026-02-09T22:05:35.509612Z","last_seen":"2026-07-14T23:30:54.589228Z","times_seen":86,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/apikj.php?lx=am\u0026?1781705619100","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:39.102Z","timestamp":1781705619102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /apikj.php?lx=am\u0026?1781705619100 HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/kj.html?lhc=am\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/5.6.40, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:39 GMT\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":84,"size_decoded":448,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0b3ef7f894e2aa93880efea9edf5b634","sha1":"c3a0cb7598d8a8ca49e69b00ea739534bfdfaeb0","sha256":"7f4448bc8fc2083824a713cec796c459ecdaed123c5426d8f9e469351e1b6fd4","sha512":"d10b95ade2f627aa04b5d78a647f91d61034429b667e171626e9f2d4c11ae3d44fa8371dbc698211507c7f8b00ae3c7ab96b879ce7becce2e3bea8475d0ffb65","ssdeep":"","tlshash":"95a01206c3097114325300c09d92105103bd700284a08701eda069c11548527065adf3","first_seen":"2026-06-17T14:13:52.019658Z","last_seen":"2026-06-17T14:13:52.019658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.tianqi.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.840Z","timestamp":1781705604840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.tianqi.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 935\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\netag: \"688f4a80-3a7\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":935,"size_decoded":1443,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"084e7bb761512af87abaed51c4b3d0c0","sha1":"74a7270943f1875b82bd8beafb19854610fa5398","sha256":"328895a93b43f93c1cdbef7fe0b537a3bdad8ae1f4350b16aaabfccff1bd857c","sha512":"74ba3e56f87d144cdd22a94749a430a3bc63f5d9c88d7cf2c98753cab7c7db7feb4d2b1e76e860820707de9075718942e79cdd46c3672c4e16b7d4bea609626a","ssdeep":"","tlshash":"5b1194c97a2be9515d1f0076842282b9fd069aca20e1e2bc4687cc37205655dcba2f92","first_seen":"2023-05-27T06:40:11Z","last_seen":"2026-07-22T23:25:36.977672Z","times_seen":1272,"resource_available":false,"data":null}},"time_used":3407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2670,"receive":737,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/apikj.php?lx=am\u0026?1781705621109","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:41.112Z","timestamp":1781705621112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /apikj.php?lx=am\u0026?1781705621109 HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/kj.html?lhc=am\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/5.6.40, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:41 GMT\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":84,"size_decoded":448,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0b3ef7f894e2aa93880efea9edf5b634","sha1":"c3a0cb7598d8a8ca49e69b00ea739534bfdfaeb0","sha256":"7f4448bc8fc2083824a713cec796c459ecdaed123c5426d8f9e469351e1b6fd4","sha512":"d10b95ade2f627aa04b5d78a647f91d61034429b667e171626e9f2d4c11ae3d44fa8371dbc698211507c7f8b00ae3c7ab96b879ce7becce2e3bea8475d0ffb65","ssdeep":"","tlshash":"95a01206c3097114325300c09d92105103bd700284a08701eda069c11548527065adf3","first_seen":"2026-06-17T14:13:52.019658Z","last_seen":"2026-06-17T14:13:52.019658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node96.aizhantj.com:21233/tjjs/?k=3te8qiofrmb","fqdn":"node96.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:25.059Z","timestamp":1781705605059,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /tjjs/?k=3te8qiofrmb HTTP/1.1\r\nHost: node96.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T22:03:12.351019Z","times_seen":17732044,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.xieziqi.com/copyright.php","fqdn":"www.xieziqi.com","domain":"xieziqi.com","tld":"com"},"ip":{"addr":"149.104.27.247","port":443,"asn":139659,"as":"LUCIDACLOUD LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:27.403Z","timestamp":1781705607403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"19760.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 09:53:27 GMT","end":"Sat, 25 Jul 2026 09:53:26 GMT"},"fingerprint":{"sha1":"F7:1C:56:5E:28:4C:C0:C9:FC:0E:8B:6D:C1:E5:6D:BB:55:B7:73:80","sha256":"10:5D:29:DF:A2:E1:EC:14:2F:AE:9A:DF:E8:63:9B:A7:74:7B:2C:DD:FF:19:D7:2B:09:54:F7:3A:30:84:AF:2B"}}},"request":{"raw":"GET /copyright.php HTTP/1.1\r\nHost: www.xieziqi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://2.82873.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12,"size_decoded":363,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"5fccce9b01bd45d23bf1ccf1ad3f5169","sha1":"315c6facbb1a611b2edfd2ffd58f683a666462ea","sha256":"ae0523c433d1ca356f2f2c403ab8a54287d96a868ee1f295aa8557c018b132cb","sha512":"1042c6cc77a2ab3d8dcd287386f62ccce23abbc90a9be3dc61d6db510b302380b9146037b132ece181c7ab1104171b778352c91418e4cb08f48b328fcfb2d267","ssdeep":"","tlshash":"4460000000cc000c0000c000000c000cc00f0c000000000000033c0003000f03000c00","first_seen":"2025-04-19T04:59:44.701199Z","last_seen":"2026-06-19T06:16:47.745846Z","times_seen":61,"resource_available":false,"data":null}},"time_used":1575,"timings":{"blocked":0,"dns":596,"connect":243,"send":0,"wait":244,"receive":0,"ssl":491},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/0068.JPG","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.805Z","timestamp":1781705604805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /0068.JPG HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 17 Nov 2025 04:13:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691aa0e9-137f1\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79857,"size_decoded":79925,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1000x90, components 3","md5":"dee90db3c60d3aba7040c02f520c6b63","sha1":"9e6369087ebf20fbd03d6c7e69588a4482b88452","sha256":"5872727d3d6de59db5185ed7bf568355aaa217b2265f19e35e30675e4d34e068","sha512":"e796a6a46c82d6e13ad9d15a9abf408ac938059fe126ef1fdc1144355f8f45c42d602513cfb04d7559ef79699b6785690c1ea7d47fce202451bfaa5c1307e50d","ssdeep":"1536:SoZztkz5b0STeyPiBIwYBgkJj2d83A3obWXL65ZYZI079FmUVKGK:VLmPlwYa8j26k6qZI0rTVlK","tlshash":"d97302a75b2d434ce92f6776806612a18e82615f2bc8f65d9fdc4c62074d6b62f0f2f0","first_seen":"2025-11-29T14:03:55.91703Z","last_seen":"2026-06-19T06:16:47.734806Z","times_seen":60,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.weizhang.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.844Z","timestamp":1781705604844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.weizhang.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688f4a80-439\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1081,"size_decoded":1300,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"ef78f55495eb27c6b09ae81752043981","sha1":"a994d1b0cef457ccf55cc621cd4fd1c66a62c3e8","sha256":"9d128a78db81e44c036f4bb48fba67647652f0fb3bcb7b720bc01f2fdacc303e","sha512":"684ea33b9439ebb650a736843a09e24f471a6ae56900da1e1379c52fe48027e571351228adfa519c5330e90a5be2e099cb14018acbf3bcdd856d428f89922be8","ssdeep":"","tlshash":"1811754f640bdf77d63748a04be5850573022106688a9805ec427d079b071449fca3f7","first_seen":"2023-05-27T06:40:10Z","last_seen":"2026-07-22T23:25:36.945668Z","times_seen":1252,"resource_available":false,"data":null}},"time_used":2667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2667,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/apikj.php?lx=am\u0026?1781705611004","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:31.012Z","timestamp":1781705611012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /apikj.php?lx=am\u0026?1781705611004 HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/kj.html?lhc=am\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/5.6.40, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:31 GMT\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":84,"size_decoded":448,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0b3ef7f894e2aa93880efea9edf5b634","sha1":"c3a0cb7598d8a8ca49e69b00ea739534bfdfaeb0","sha256":"7f4448bc8fc2083824a713cec796c459ecdaed123c5426d8f9e469351e1b6fd4","sha512":"d10b95ade2f627aa04b5d78a647f91d61034429b667e171626e9f2d4c11ae3d44fa8371dbc698211507c7f8b00ae3c7ab96b879ce7becce2e3bea8475d0ffb65","ssdeep":"","tlshash":"95a01206c3097114325300c09d92105103bd700284a08701eda069c11548527065adf3","first_seen":"2026-06-17T14:13:52.019658Z","last_seen":"2026-06-17T14:13:52.019658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/layer.css","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.561Z","timestamp":1781705604561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/layer.css HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 Aug 2025 11:39:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688f4a72-381f\"\r\nexpires: Thu, 18 Jun 2026 02:13:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14367,"size_decoded":3730,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-08-03T22:22:03.548159Z","times_seen":6789,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/sun138.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.808Z","timestamp":1781705604808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /sun138.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 15 Apr 2026 08:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69df5102-102df\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66271,"size_decoded":66811,"mime_type":"image/png","magic":"PNG image data, 1000 x 90, 8-bit/color RGB, non-interlaced","md5":"4374bce87db77afbdcb03eaba3c6f297","sha1":"de81e86bb8a4827d4fce847b43ad6e39e95b3f69","sha256":"7ce4bf4a9d41ff3e3e5432d95a0de7a33053e8a6d52d24694c7153035304407f","sha512":"1795d3b3590c66106f67cc094fe883338bec8d2acf8ec48c54e512baa29de131e4ae18109d23c77c9a788bc1215197b7940b44f6b4d1d6ab4272b01891535d14","ssdeep":"1536:FTGz7N6IbmAiCp5H63LTiXBvvlfwf3fbRnrMw6HNpzsPbiY:FTK7ZBzH63Lmx1s9nr/6KbiY","tlshash":"685302efe815d72a6348a21275225cda5ef7f40200adf2dfea3714045ae2e50a5d273f","first_seen":"2026-05-12T14:34:13.96217Z","last_seen":"2026-06-19T06:16:47.731869Z","times_seen":48,"resource_available":false,"data":null}},"time_used":2703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.xingzuo.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.843Z","timestamp":1781705604843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.xingzuo.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688f4a80-5e2\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1506,"size_decoded":2048,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"e7c03c54ca63b695474286a86c6cf472","sha1":"ea7c7417186dc658e8b830144f1eca60282f62ec","sha256":"12d01dbf7a27638b3ef5039b91a959cb3f9465b4d932b09146001fbba4410640","sha512":"5abf46583c0fae456d35def07a1b6e371d456fe6131501c68c7cc1c8f3f179b03ec4de1b82ddda5ec882722259f58bc1edf18048e1c2793b2fd7baf896ff6c01","ssdeep":"","tlshash":"1b31f93a617ce33444e31e1f4c5a98af86ada55f660d094b9076993f37a33f7a502060","first_seen":"2023-05-27T06:40:11Z","last_seen":"2026-07-22T23:25:36.963501Z","times_seen":1253,"resource_available":false,"data":null}},"time_used":2668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1.21302132.com/tongji/?v=1.2","fqdn":"1.21302132.com","domain":"21302132.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.878Z","timestamp":1781705604878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.21302132.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 18:33:04 GMT","end":"Fri, 31 Jul 2026 18:33:03 GMT"},"fingerprint":{"sha1":"C2:C7:D1:31:F4:05:12:BD:7B:81:23:B3:A6:9E:B5:94:AF:A9:59:2C","sha256":"DF:E3:51:7A:D6:10:15:F3:04:BE:A0:90:E9:9F:27:60:68:E2:E7:AF:D6:49:75:2C:24:63:3B:05:8F:0E:45:4D"}}},"request":{"raw":"GET /tongji/?v=1.2 HTTP/1.1\r\nHost: 1.21302132.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ClassCMS, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:26 GMT\r\ncontent-length: 1073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2800,"size_decoded":1313,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a134a85b3131ce0b2c7520b22b2a10f1","sha1":"97b71324fd3da0e3d51c13bcec4a87cc43020fba","sha256":"a7fdf086f155bf92a004e4a00557b72d69914a2f0d92be88db766ef95d0f2d65","sha512":"faf5c8ae6a2fe9e3fecd69cc9bbfb995f95a518e9d12cc4258ce23e1e5aa44d964b0d435c357357e8c13a311e7b39a9ad2f94a4c9d5101487993610af3a1ecdb","ssdeep":"","tlshash":"6651df9955a2e3e604b377dfaf6fa303b4654107384bc4263d5c00892f2346be1d87d9","first_seen":"2025-05-18T12:30:21.04523Z","last_seen":"2026-07-01T01:15:42.322845Z","times_seen":108,"resource_available":true,"data":null}},"time_used":1507,"timings":{"blocked":0,"dns":74,"connect":235,"send":0,"wait":251,"receive":0,"ssl":947},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"1.21302132.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node93.aizhantj.com:21233/tjjs/?k=2a5e5xui8up","fqdn":"node93.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:25.061Z","timestamp":1781705605061,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tjjs/?k=2a5e5xui8up HTTP/1.1\r\nHost: node93.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T22:03:12.351019Z","times_seen":17732044,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node94.aizhantj.com:21233/tjjs/?k=7s2cq3n2d59","fqdn":"node94.aizhantj.com","domain":"aizhantj.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:25.063Z","timestamp":1781705605063,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /tjjs/?k=7s2cq3n2d59 HTTP/1.1\r\nHost: node94.aizhantj.com:21233\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T22:03:12.351019Z","times_seen":17732044,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/static/js/jquery1.7.2.min.js","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:26.900Z","timestamp":1781705606900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /static/js/jquery1.7.2.min.js HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/kj.html?lhc=am\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 22 Feb 2022 06:55:34 GMT\r\naccept-ranges: bytes\r\netag: \"0b74930b927d81:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:26 GMT\r\ncontent-length: 40392\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":178129,"size_decoded":40717,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1071), with CRLF line terminators","md5":"98c11854e7b616fd7dbf91b4dc0b95a3","sha1":"8f96c2653eda7d534000a85eaf1c11a5e8a87fe9","sha256":"9f3dc5d41c8ef4a2b25bb72dfa0759ee1cf5b52ce81226553135e6527baa4cd6","sha512":"9797243fcf523dbc72edaf28373e27463030426ab3cbc3a83fd2fcb1b12c403eb8b7c5a4bf29a0710e221f0092c23b9a337c09247806a193b97179ddf38aa6fb","ssdeep":"3072:MejOErZKJURMVe2uSi4zNsgZoM//aijapXKJRCc2Rm1ExK0SawqgRGebsPdfdFaP:lOErZKJURMVe2uSi4zNsLi+pXIC4ExKL","tlshash":"8d043199b6d5207a9533f33ece7fc905f576496b129488467d3ca4a42f3081086bafec","first_seen":"2023-04-05T01:51:16Z","last_seen":"2026-06-19T06:16:47.737095Z","times_seen":88,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/apikj.php?lx=am\u0026?1781705613006","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:33.009Z","timestamp":1781705613009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /apikj.php?lx=am\u0026?1781705613006 HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/kj.html?lhc=am\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/5.6.40, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:32 GMT\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":84,"size_decoded":448,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0b3ef7f894e2aa93880efea9edf5b634","sha1":"c3a0cb7598d8a8ca49e69b00ea739534bfdfaeb0","sha256":"7f4448bc8fc2083824a713cec796c459ecdaed123c5426d8f9e469351e1b6fd4","sha512":"d10b95ade2f627aa04b5d78a647f91d61034429b667e171626e9f2d4c11ae3d44fa8371dbc698211507c7f8b00ae3c7ab96b879ce7becce2e3bea8475d0ffb65","ssdeep":"","tlshash":"95a01206c3097114325300c09d92105103bd700284a08701eda069c11548527065adf3","first_seen":"2026-06-17T14:13:52.019658Z","last_seen":"2026-06-17T14:13:52.019658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2.82873.com/apikj.php?lx=am\u0026?1781705617026","fqdn":"2.82873.com","domain":"82873.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2.82873.com/kj.html?lhc=am","date":"2026-06-17T14:13:37.032Z","timestamp":1781705617032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.82873.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 18:34:29 GMT","end":"Wed, 09 Sep 2026 18:34:28 GMT"},"fingerprint":{"sha1":"3F:83:93:C2:17:B9:D4:58:B5:AF:75:5A:AA:52:79:C5:04:74:AE:AA","sha256":"BE:BE:98:73:6F:52:11:E4:E9:E5:65:84:0E:B0:A5:1B:96:B4:5E:51:B7:50:95:CF:13:CA:AF:3C:73:E2:EC:93"}}},"request":{"raw":"GET /apikj.php?lx=am\u0026?1781705617026 HTTP/1.1\r\nHost: 2.82873.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2.82873.com/kj.html?lhc=am\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/5.6.40, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:37 GMT\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":84,"size_decoded":448,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"0b3ef7f894e2aa93880efea9edf5b634","sha1":"c3a0cb7598d8a8ca49e69b00ea739534bfdfaeb0","sha256":"7f4448bc8fc2083824a713cec796c459ecdaed123c5426d8f9e469351e1b6fd4","sha512":"d10b95ade2f627aa04b5d78a647f91d61034429b667e171626e9f2d4c11ae3d44fa8371dbc698211507c7f8b00ae3c7ab96b879ce7becce2e3bea8475d0ffb65","ssdeep":"","tlshash":"95a01206c3097114325300c09d92105103bd700284a08701eda069c11548527065adf3","first_seen":"2026-06-17T14:13:52.019658Z","last_seen":"2026-06-17T14:13:52.019658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.huoche.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.842Z","timestamp":1781705604842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.huoche.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 745\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\netag: \"688f4a80-2e9\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":745,"size_decoded":1253,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"0d58df55376773d373e201aaa32f6a9c","sha1":"5ab58d70b3c80861bee182526a9f57fd701c70b2","sha256":"7d2150c88a15e1d14561388f9b4c5eb6bdcaab9a4a17fd4dfa023c700585de27","sha512":"eae3200cde710918f5e23a0f2adb130488e0bf5abd7f17261bd4440d641a3c9f23ed6a3ca8297d03e9a26f10e86a160b688383ce76e13fec9ee806f66ebbf754","ssdeep":"","tlshash":"a30115f33727b875e945cb781048250df6173909623113e8d439aa69fa12a6b028ae55","first_seen":"2023-05-27T06:40:10Z","last_seen":"2026-07-22T23:25:36.982147Z","times_seen":1271,"resource_available":false,"data":null}},"time_used":3406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2669,"receive":737,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.jiemeng.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.847Z","timestamp":1781705604847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.jiemeng.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 994\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\netag: \"688f4a80-3e2\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":994,"size_decoded":1502,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"b8e70e0b29e12b622076fddf4379481d","sha1":"4294b780bf80a47cae118b63ba8255e8cafb53f0","sha256":"2b58fd715df557cce1e80c117fd8f805c38d983586fa15718836e418ffccc5e9","sha512":"e2704efaa84e604c7c236828b273a9e05bb32960dbffa108c96e468b8ebd76d28d770b75fef63ef02ea73660bd4e6134c618244c94ea338ee410ae8f9f8354af","ssdeep":"","tlshash":"7c11c8dc33b4d5a210c5adb8f41360f624736f915d71452cc56bbc1caa0b481a1c1382","first_seen":"2023-05-27T06:40:11Z","last_seen":"2026-07-22T23:25:36.940913Z","times_seen":1266,"resource_available":false,"data":null}},"time_used":3442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2665,"receive":777,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1.21302132.com/tongji/ajax/?hash=CvfkAU4cdG\u0026url=https%3A%2F%2Fhg111222.cc%2F\u0026referer=https%3A%2F%2F11365app.com%2F\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026u=VkFHL5T2Zr\u0026rnd=0.1999042806460708","fqdn":"1.21302132.com","domain":"21302132.com","tld":"com"},"ip":{"addr":"103.163.208.152","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:26.423Z","timestamp":1781705606423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"1.21302132.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 18:33:04 GMT","end":"Fri, 31 Jul 2026 18:33:03 GMT"},"fingerprint":{"sha1":"C2:C7:D1:31:F4:05:12:BD:7B:81:23:B3:A6:9E:B5:94:AF:A9:59:2C","sha256":"DF:E3:51:7A:D6:10:15:F3:04:BE:A0:90:E9:9F:27:60:68:E2:E7:AF:D6:49:75:2C:24:63:3B:05:8F:0E:45:4D"}}},"request":{"raw":"GET /tongji/ajax/?hash=CvfkAU4cdG\u0026url=https%3A%2F%2Fhg111222.cc%2F\u0026referer=https%3A%2F%2F11365app.com%2F\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026u=VkFHL5T2Zr\u0026rnd=0.1999042806460708 HTTP/1.1\r\nHost: 1.21302132.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hg111222.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nserver: Microsoft-IIS/10.0\r\naccess-control-allow-origin: *\r\nx-powered-by: ClassCMS, ASP.NET\r\ndate: Wed, 17 Jun 2026 14:13:27 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T22:03:12.351019Z","times_seen":17732044,"resource_available":true,"data":null}},"time_used":1002,"timings":{"blocked":0,"dns":0,"connect":246,"send":0,"wait":259,"receive":0,"ssl":497},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"1.21302132.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"11365app.com/","fqdn":"11365app.com","domain":"11365app.com","tld":"com"},"ip":{"addr":"45.144.136.33","port":443,"asn":139659,"as":"LUCIDACLOUD LIMITED","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T14:13:20.522Z","timestamp":1781705600522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"003bet.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 02:41:56 GMT","end":"Sun, 13 Sep 2026 02:41:55 GMT"},"fingerprint":{"sha1":"18:37:F1:8D:56:EC:D7:C9:96:AB:80:2B:2B:22:BC:B1:32:01:C3:EA","sha256":"8C:E1:EB:45:7E:55:57:D2:C5:C2:5A:54:FA:05:17:F9:32:2E:E1:6C:B8:AF:7D:CF:9A:6D:55:6F:88:AB:26:92"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 11365app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 406\r\nlast-modified: Mon, 15 Jun 2026 03:10:11 GMT\r\netag: \"6a2f6d13-196\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T22:03:12.351019Z","times_seen":17732044,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"11365app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"11365app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/index.css","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.558Z","timestamp":1781705604558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/index.css HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 Aug 2025 11:39:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688f4a72-561f\"\r\nexpires: Thu, 18 Jun 2026 02:13:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22047,"size_decoded":5377,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3641505e58b45fd902c1429f9a3fbd23","sha1":"15936210f7fcc67b5802089d5083e7c5b9ee893e","sha256":"f535479bd51e6e143ac6748fa37851b6bcada95546f56a48298e76826588a494","sha512":"710b7bd8aec6f1bbf5448d25e75176cfdcaf788fe625420325eadbd0ac00c055d441619f685e1354bb862558440c40704851517b617fdcaa33e34fa7c43a9d1b","ssdeep":"384:kUwkxy6zDBVbSVYo3pSBQPknw6AJFuhlDoj4AJlO8SouJhJTMwoCPBAeqt5lxA/7:Zx5zDPbSDZSBQ4w5J4hB6HJlO8SfJhJ7","tlshash":"fca29739ca94208d73134a1b7fb07ec96ddcc4a1de4b4f5ef653fea896cb58a1822140","first_seen":"2025-10-18T07:58:07.54172Z","last_seen":"2026-06-19T06:16:47.746317Z","times_seen":62,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/layer.js.%E4%B8%8B%E8%BD%BD","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.568Z","timestamp":1781705604568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/layer.js.%E4%B8%8B%E8%BD%BD HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":311,"size_decoded":399,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e0949e6a5244f833129eecb67db2d225","sha1":"84afb40b38250446be018a0b6618fe3ee33dd676","sha256":"c1526b6f29e936c91b98c51ff2c98d38d467a51a35897bb79b00ac59c9ece120","sha512":"a1f4910326f0a6a3dd104d9f223651580dfefda710179401e852b17315f6224db4811187496dbf010c2191888f7323e9bb599d82e46528c39de885551d95d157","ssdeep":"","tlshash":"cbe0726c3e12ae28065320b632f7e358e8e3223a2c2ac1100489c85b72867d68dc2321","first_seen":"2026-02-09T22:05:35.509612Z","last_seen":"2026-07-14T23:30:54.589228Z","times_seen":86,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.suanming.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.845Z","timestamp":1781705604845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.suanming.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688f4a80-58d\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1421,"size_decoded":1963,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"4c67c63c570396ed22d21331c448f333","sha1":"b7285a2a3aa647b2dc7f14711eae9ac822f3878c","sha256":"3a710cb04f24497761e1b691866a06a9f67731d881e34510f774be7e598eb091","sha512":"fedec66a2fcc2183320fda2c6ba7b23f6b21072388d930d72925d1dd9b3496bfe9800b252a747b7cbd4bfd7d8995661fbeec2e1b93f7dda4172ef2465dfebf8b","ssdeep":"","tlshash":"f921c6f544733eb11cf9703b8faea0d2c108624b951c13700436665b53b2b8e046cfb5","first_seen":"2023-05-27T06:40:11Z","last_seen":"2026-07-22T23:25:36.975132Z","times_seen":1252,"resource_available":false,"data":null}},"time_used":2666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hg111222.cc/index_files/z.feiji.png","fqdn":"hg111222.cc","domain":"hg111222.cc","tld":"cc"},"ip":{"addr":"23.248.239.250","port":443,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.846Z","timestamp":1781705604846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.hg111222.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 05:00:57 GMT","end":"Sat, 05 Sep 2026 05:00:56 GMT"},"fingerprint":{"sha1":"85:A8:C2:D2:39:22:DB:02:30:45:27:99:82:79:2B:A5:B1:1A:BC:7D","sha256":"6D:98:AC:39:FF:C0:A9:78:CA:7C:C7:EE:36:A1:F0:FC:CE:43:3E:C3:F1:2E:A8:BE:CB:04:5E:40:AC:BE:EF:D1"}}},"request":{"raw":"GET /index_files/z.feiji.png HTTP/1.1\r\nHost: hg111222.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 14:13:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 963\r\nlast-modified: Sun, 03 Aug 2025 11:39:44 GMT\r\netag: \"688f4a80-3c3\"\r\nexpires: Fri, 17 Jul 2026 14:13:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":963,"size_decoded":1471,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"13f094857d419ee543a1aa5a7caca62e","sha1":"5722a23b2c2e4ac2b49ac80b1bcfeb75ade749ff","sha256":"94fd2fe2d17a61c3f96d82fa8f7d3c91797f42ee1c337ef52b7108eb47325a16","sha512":"477e2c4608b565f9f12d89ee10a747266004d4cf9aa8eb32d9a42b8f1160fb110cb2c7f9335423c5de7e34981bc944543b2cfaabd15176b3ca312f28ae2f3465","ssdeep":"","tlshash":"4a118841187a2d36dd69ad76a925e3e2edb208d7cd8cd2277113f4e44e2dc8d852c234","first_seen":"2023-05-27T06:40:11Z","last_seen":"2026-07-22T23:25:36.971229Z","times_seen":1266,"resource_available":false,"data":null}},"time_used":3443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2666,"receive":777,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"hg111222.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"hg111222.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ggfm.gzsy12348.com/qrcode.js","fqdn":"ggfm.gzsy12348.com","domain":"gzsy12348.com","tld":"com"},"ip":{"addr":"111.68.15.22","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hg111222.cc/","date":"2026-06-17T14:13:24.849Z","timestamp":1781705604849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ggfm.gzsy12348.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 08:19:28 GMT","end":"Tue, 25 Aug 2026 08:19:27 GMT"},"fingerprint":{"sha1":"F1:47:32:0E:60:20:05:C3:40:93:D2:91:B9:E6:52:F7:97:10:38:E1","sha256":"1B:94:07:80:7A:5B:79:20:33:10:AA:A2:01:26:F8:9C:E0:5E:0C:C8:E5:3B:9C:96:8F:3B:EC:CA:19:5E:20:E6"}}},"request":{"raw":"GET /qrcode.js HTTP/1.1\r\nHost: ggfm.gzsy12348.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hg111222.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\ndate: Wed, 17 Jun 2026 14:13:25 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":144,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T22:03:12.351019Z","times_seen":17732044,"resource_available":true,"data":null}},"time_used":1131,"timings":{"blocked":-1,"dns":21,"connect":276,"send":0,"wait":276,"receive":0,"ssl":557},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}