{"report_id":"5ee79fef-ea3c-4361-99c1-c482738831ab","version":0,"status":"done","tags":[],"date":"2026-08-28T14:32:03Z","url":{"schema":"http","addr":"xygjh.com/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"title":"興證國際集團","dom":{"size":22692,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17011)","md5":"fca6b9d37c592708f7492fc1fbf505f8","sha1":"f5ed8147740ad55e8556aab467d12a47bd9e1ea2","sha256":"87d6b72c0a9c543d9a01594ef05140e4e849db703c9c8833eb2282b3592dcf32","sha512":"1b32e7cb84a594238fbc7fbc46d8837931dd62d8795167526ac5badd1aea29dc0e2e51870e50cb02a388472a4b4d2c6f58bf90d6d758f89b65f066753458106b","ssdeep":"384:0WbY840SYHdiy2dDXDZCxc3l3EwPZxW4otPDYI4bA:JsDXDQxEGDYI4bA","tlshash":"70a29a35a60041bb03b799c0f621bf2f76d6f30f81068445abbd918a2fd3db6bb61465","dom_hash":"domhashe9ca0f4a87d0cd2786f88d56f0d369e9","first_seen":"2026-08-28T14:32:10.649877Z","last_seen":"2026-08-28T14:32:10.649877Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xygjh.com/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:32:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xygjh.com","ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-20","domain_rank":0,"first_seen":"2026-08-28T14:00:24.338969Z","last_seen":"2026-08-28T14:00:24.338969Z","alert_count":27,"request_count":27,"received_data":3624471,"sent_data":12152,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2026-08-28T14:00:24.214744Z","last_seen":"2026-08-28T14:00:24.214744Z","alert_count":0,"request_count":27,"received_data":1069345,"sent_data":15332,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"webapi.xygjh.com","ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-20","domain_rank":0,"first_seen":"2026-08-28T14:00:24.338748Z","last_seen":"2026-08-28T14:00:24.338748Z","alert_count":12,"request_count":13,"received_data":45266,"sent_data":6813,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"4ec5451adeaf524eec85b5bd0538a949","sha1":"27aa1c9973fd6d1e329e3def5d9eb18053cf205e","sha256":"cc4705fafc3b0ebf0cde55bf1157e4b6fef0413c5991229f2f162265cb511899","sha512":"9d14aaf5f450a48ab982859afa3af94065f732fa87dfde550321ff42cb1733dabc21e353785022dba736cac2cced145d0215926aac60c97be3faa44ba81255fa","ssdeep":"","tlshash":"8fc08cc5a0c23d002622646024bf24f89024442670885b028ca8dc583e230b09237ea8","size":145,"data":"","first_seen":"2024-12-08T15:39:09.846423Z","last_seen":"2026-08-28T20:20:52.724373Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"2cb9030274017713592e1f1881652b10","sha1":"c2c538ff7c429114daa1991fdcf81e193d73c7f6","sha256":"c2f7de45899b9e05da2fa131157564005bc95ccd9da3e5eb7795a177201a2416","sha512":"be857146e2b7e7168f098cf884966afb33fd8283365f3171080ae2c3d808027b8648469b3531b96707d40f856d782f069833ac5d4babc1501029a2404f09d199","ssdeep":"","tlshash":"22c08cc4a0d22d041712681460af35e89024402670481b428c94d8682e220b48233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-08-28T20:20:52.721202Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"2b72232ed380a528eeb3a552d77ae9c7","sha1":"6dc118004f8c5dcbcb571446e544948e5884cd56","sha256":"b7d4991a24ab4ba72ab4e3cfa67e51ed181d0f21335bd7adb062d024a1564c4a","sha512":"9a7cba48645dd78c7a719297ffad44b3da7263835e444e0fde947908fd4345a1cbb1d672b3e53338231cd6a11b38c7d45e5395f1387d368b0e8f93beea4d6347","ssdeep":"","tlshash":"77c08cc4a0c26d001602649010af34e890244027b0485b028c94d8482e220b08233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.519141Z","last_seen":"2026-08-28T20:20:52.724995Z","times_seen":254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"b1e6506abda1ffa5b9ab2721a0fee13f","sha1":"cc64d89d747a4c6f5293b262055d3cb8e175b738","sha256":"848a05dd565ed4ad22c665530b61473e4437ca86f8bd027a8c952177f73b5269","sha512":"ac564a39d053f7c5f6e636296207458bae1d069f50356ee85ac23a8045617ebbe8cb5f26870d5a19f2d3cf834bc578918ad2b9f46bb68e3d0961c68841bb6e17","ssdeep":"","tlshash":"ecc08cc4a0c32d001643641050af34e490348026b0481b428c94d8492e230b08233e98","size":139,"data":"","first_seen":"2023-06-07T05:45:46Z","last_seen":"2026-08-28T20:20:52.729191Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"929882e52f0828f4740db7f63ca60215","sha1":"3b81187c8d8fbfdab5e5e03eda6a7f274b55185f","sha256":"af502d50dd9cd09762931a851c7aabffa681fec6756d4d63265f05bc9563bd3e","sha512":"920a42b3ee1725ec581dce922863e884c37bd51e31b6c4d676bea56ee80a44d9d9807ee1be7d89e6fa6ee92a0fed5e853f48d5eb4de3997bd096da4dcb5fbc33","ssdeep":"","tlshash":"abc02b1287102dba430040a8c407fc0253141724811410f8fb1cfe00770414dc3ccb84","size":150,"data":"","first_seen":"2026-08-10T18:17:41.086796Z","last_seen":"2026-08-28T20:20:52.721784Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-29T17:38:42.191487Z","times_seen":42045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-29T17:38:42.192324Z","times_seen":43440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/vendor-f7ad3d94.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7ddd11c1ced29cf52fc014611d032ba","sha1":"b1fd6ee918464c9051e78381b65d44afd208749c","sha256":"4088166944364d76a1b3378a26b7d5e6fd56db5e312d37098e483590453b5b9c","sha512":"ca20c097163cdf78b30f82a87461c7a067d8e2922c4c36be7192dfff90bc66dc80bf4b404f011ecf82704e146a9c38595abf567644edb1fdc0fdde46b3ca2921","ssdeep":"12288:rUDfK9jcSx8+wGxIvYeogPxsyLX8Q2TCv3aG1p1dPvcOk:4DiNB8+wGxIQeogpVgQ2TfG1tvcZ","tlshash":"d81538c87196b0a143ab14e150bb0107f3396e59744d84a8f1add8eb3eb9d4992b7f3c","size":946276,"data":"","first_seen":"2026-08-10T18:17:41.068493Z","last_seen":"2026-08-28T20:20:52.717327Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/filters-ef417436.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"83871d39d9589766996dab7a57a2ef88","sha1":"f60969e759f4e5f5ed8aad15fe5892762175bffa","sha256":"ce488d8895d6122bbc1c6ccef9af7a2d6e614b004888d61039d5b8a0e3d85570","sha512":"3acace1dd88d9a4d792c0695aa56a55121a3406d7090551cc1ea6ba11a21485d72b18a5f85f16f7e4615fe6b05be90b930e84276a63d7f7e9ea07c4f8827ed1d","ssdeep":"96:nkHZamDUy1Uy0ywk5UkBC66YVIr7DsFRi83O1WrhBr2N55HUimyW4zs9a2k7FDbT:nk5hFDJX5pw7pONlN05BmXws9Tk7FDbT","tlshash":"839186ecb6d36033a7ea29ea541a4424f08efc057c0f865de5ab9491be63044d07f724","size":4245,"data":"","first_seen":"2026-08-10T18:17:41.082977Z","last_seen":"2026-08-28T20:20:52.707509Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"7fb29df2e36f83266ce67470baebf861","sha1":"6f6b9195528213fc54fe6ba50a7a9db70ed9d2ab","sha256":"2b358ec99f45bc23f698d0afcafbcd767c909873e82a34fdda7727d4ae0f39a8","sha512":"1397e09338efbd2b8830b03ebbb2ae6b71d6e486406c767c030f8dfeda4cc3de15b0250063e12153ac9851f334d03096acd5483f93a6c2665f039f6828e55605","ssdeep":"","tlshash":"a2c08cc4a0d26e101602641020af28e8a0254027704c5b56ac94e8582e220f0823be98","size":145,"data":"","first_seen":"2026-08-10T18:17:41.089987Z","last_seen":"2026-08-28T20:20:52.72373Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"4f032206eea492e3575ea5f6c7867f43","sha1":"e04fc5a06dc30cd49d365ace3220f0b3f746df7e","sha256":"a9302fb5a40bf253c5337ed2887eb01bf7efed372da5b669e65410e09735c453","sha512":"1fc125d6260218202f687d80f3b3dfd56d71b7813ecd072ae4f14e0ff95b9dd1df193b33f0696df53d1608ba024baaf3f463fac8eb0131672ac511901a6dcfbe","ssdeep":"","tlshash":"5fc08cc4a0c32d101602651011af25e890248026708c1b038ca4d84d3e220b09233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.516962Z","last_seen":"2026-08-28T20:20:52.728614Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/currencyItem-1535373b.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"86feb0e6bd1f6e400357181a9ff6271f","sha1":"c0cc13e3415c090c335f211bca93a03111b96dcb","sha256":"1cad1a74d290b500d993d67f1379364d54e7a6c6f562c9f05fa9676cfccf561e","sha512":"88df931100b01764c882311632c6654dae2e9210980861602da33213848f7066d7152ef9355adc5a1f91962443b99ccf64e45461c0349a51cd9e18cd85798b18","ssdeep":"","tlshash":"5121dfae9510c271f3ba8046c47c0419076dbfca700196c4bafe1d593b02ab8d72cb32","size":1220,"data":"","first_seen":"2026-08-10T18:17:41.042844Z","last_seen":"2026-08-28T20:20:52.703119Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"cf91b633dd7aa3a910f7203ae8fe6e17","sha1":"45d58e726a623b9e8f470e616bb21e0d79b921b9","sha256":"aa19bcc17f77cb209b91962de32d71b2d5dcb71dd7c34ce623ea6bed117e3eb1","sha512":"0fee27821ca07b1d1334a207806b1d1b49a8fdd98737f499c880ca9e835ceb36c18607e7072ee36e642bfefd2ba7186545b7fc04d2f07c9fb17dde2c806355ab","ssdeep":"","tlshash":"41c080c470e27d44165565b5207f74d45034441ff459db52dcd4ec593d225b4d337db8","size":172,"data":"","first_seen":"2024-12-08T15:39:09.836814Z","last_seen":"2026-08-28T20:20:52.730422Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"d549d426f2be98d3d463a8f1e172be11","sha1":"b1a5a4f73c5c7ed77f24558baea0caf104bcd329","sha256":"73743816b3bf832c5542ccd44ca4da8675acd48b7c4b071e2cc4d43d808a434d","sha512":"48ad7b36b98095946472116a02425c340b48226ea5120dd3a6cc1ac3e61b6dbfaef3c8b919131030a71311016adcd79f554c0f586613840cdfb2fe39afbb3bad","ssdeep":"","tlshash":"31c08cc5b0c22d009a02642610af28e89024442670481b528c94dc482e220f08237e98","size":142,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-08-28T20:20:52.719889Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"eff8762701acc1c42deefe4be573f595","sha1":"824fa104a5d64c457d17883e2f807d6f6c2593ca","sha256":"689e64c6f32f3b558307001f640e6839f684a5fb86719a6298afd6c84d2b0c81","sha512":"dbba64d868868efbbd0d1b933a68396dd31643f98f3b925328ce8bf6b230fb90295b60afb90efed806f7249fe9aa87dfd363c531fe2c0fe8a57523a9177e1d4f","ssdeep":"","tlshash":"5fc08cc4b0c22d001a02642010af24e4a024402ab0482b029cd4d8482e230f08233f98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-08-28T20:20:52.729812Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/charting_library/charting_library.min.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-28T20:21:12.205695Z","times_seen":1382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-7f972a48.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"466ff3206b6d3939f4040165212faa02","sha1":"8e2ae8fd654c4edeb3741d5f9006a02b26333241","sha256":"1b97a866a436589858074f20278035ad6c70ccf7e4f295acfd2ce26acbc40f85","sha512":"42b6287698e0569e23299d9e4e675594f58cbb9dd8282a4aff59fa740751c05285a72f5d0f7b3af2c6cdc3f305f66d493011ffd28cf89ed236cfad32ebac6032","ssdeep":"24576:1Ja6gl444iGOaqoI776gPJQ5+duMaU6S+X5oPo76BVb:10R+iGOaqok76EJQ5+duMaU6S+X5oPoO","tlshash":"c3356b992ee9a89d04f72a2bb48d7a3150fa0da1d351c0d60fec96f962e1f135357b30","size":1067045,"data":"","first_seen":"2026-08-10T18:17:41.097633Z","last_seen":"2026-08-28T20:20:52.727465Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-08-28T22:30:35.478275Z","times_seen":536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-3bb9c68f.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a4230bce27a0a98973d7ad9097fbfd3","sha1":"8c2552be9add81b07de2bb9cf32e6a89e425ac35","sha256":"eea5de31eb3a1a2794283552ce5684aaa25498e546fe5d94a09cd1656170f8ad","sha512":"dea4143654f6e2a7f06abded0f458c41ad3cb1085aaf56d95cddf9ab147895d22d22912b40a62cb90564b10476898668be4eff1ac016e86629c1ea1e035ac546","ssdeep":"","tlshash":"13f0c9afac2a852133930ca8a4270922620c2a4573a8d1e8c16a1b2183718d2d24f72a","size":507,"data":"","first_seen":"2026-08-10T18:17:41.08119Z","last_seen":"2026-08-28T20:20:52.705973Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-81fc9a92.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6836078dc379bc58aa6e1f4ac820dbc8","sha1":"54c4f7fbf507ce1e88ffff6230739ad7eb49fbc4","sha256":"e96a15149fa5d9c95dd4d2a96fb9dea09c99031c86231d3aff0aeede2872ed28","sha512":"61e800bf25fad2492557f9de2e95e3bf306fed559a3e1399b3994a82eaf110f9721c25c774c9bd37ff67edb47ecd9a887eab6ae5e86d58f04f1b94072d5d1178","ssdeep":"","tlshash":"7d0120f9fd2eceb75fb2484402d0264515490fcef96218f988973e6117e2c918ace70c","size":777,"data":"","first_seen":"2026-08-10T18:17:41.070138Z","last_seen":"2026-08-28T20:20:52.702435Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"65cc32c48c6ca2b8b2fd44c1670ae667","sha1":"f2a116897b02c9bf0bb31247024703d913d0cd13","sha256":"83e989e9718ddc6751b336792e962c10faa616a9f3feaffc90f9c430e4c6d221","sha512":"bd8ce0e0a56f50ef5d499026d682702cf4fc60698a0152097cad28c8b889fcd4bdad15f87af7f14437f9cba7bac5e26d80af6bbc49249f7efbdc468ef39be9f4","ssdeep":"","tlshash":"11c08cc4a0c22d001602681110bf24e890244427704c5b028c98dc583e220b49237ed8","size":139,"data":"","first_seen":"2024-12-08T15:39:09.862859Z","last_seen":"2026-08-28T20:20:52.726713Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"5ddcf000fe640727c37a007add885f01","sha1":"c03cacf1f7fa18c439f4df83c545efdc7947979a","sha256":"1002ce8702b1ab8819bbaaa1107fcac63cc383b1ac134849914669ea3a821780","sha512":"16d0825adacbef5b34caf9e925d789b63afba408f7b8f9cf8ea2cd4de1bf92c21d1edb4a5f233fb755c7a9df1d0bdd22a86bfaac106e69457cd2832ace015a7d","ssdeep":"","tlshash":"bcc08cc8a1c26d001a06641010bf28e49034802674481b029d94d8482e320b08233ea8","size":139,"data":"","first_seen":"2024-11-12T13:07:34.2755Z","last_seen":"2026-08-28T20:20:52.725573Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"6c52629347a6bfef5703f75ccb2d2348","sha1":"7d62cf6b22658a24440d23409bcf634acb652120","sha256":"f870507734b87130af490d779385c65aba4784791207f95494a28081faba4a5e","sha512":"ada18dcb02ca652f7d9ab899b222f8696c85f0e58085d764f1cc5e26486d13da333dd43861f5766af77828995f917c5c819c54310a83c4b9359eb0fc210d0a06","ssdeep":"","tlshash":"71c08cc4a0c32d005602b61014af24e890244027b04c6b82ac94d8582e220b0823bea8","size":145,"data":"","first_seen":"2026-08-10T18:17:41.088745Z","last_seen":"2026-08-28T20:20:52.71927Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-c68575d9.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8db66493584cbb588ed46d561d9e589c","sha1":"8d7b1a0c8821642078096d0af6d841e76ceb9d27","sha256":"79012b0995e77f48d5d838a92ec668cd406ab58e5d3fc729321406bb31519695","sha512":"bb7addda4a51a9d38fb8bc09d496d035e1fdc60dda97501b870b461b81043926b05c0fc45ebaadd952b13a9620b325d819adee689bd9a92cbb7fd8b15f5d22b2","ssdeep":"384:EQ1zLZK8R+1LA6usrjdLE2WF09fV4yIITzHt8d68W+CtD:EQdNR+hBbC09fVtWg8W+6","tlshash":"1842b559f40a4a7ef6b7d05520480400b20d7feb60068db3f2bdbe942792db8a75e728","size":12881,"data":"","first_seen":"2026-08-10T18:17:41.082096Z","last_seen":"2026-08-28T20:20:52.714394Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-5a0c4154.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"019b0cd18183566bba4e85a1717e22ab","sha1":"8d32e62c513d4fd494e18f8625c389014c6c6cea","sha256":"9615ea877ecc63e471bf7010a0e3e5fdd35d14e392bf639bd01b951218dcbcc9","sha512":"deaf721d155471e7674f2fad21a542e2c36a45f0b88609120d845c0d64cd6abe8ef3a0447edc42faee47ccab7f09664fdce0778fe1f4526a9bd8bf6467662c9f","ssdeep":"96:uoS1b9aFYvwNVGkulD7hoPk5Js7a37IDwvn3hquveC3RKEu7PGc2Ww:uoS1b9+YvwNJKXhoP6f7IDa3hqDyRKE7","tlshash":"5ba1938cbc06497ab677188044880921325c2ff2622988f2f2fdee6613e5d79d78477a","size":4904,"data":"","first_seen":"2026-08-10T18:17:41.077076Z","last_seen":"2026-08-28T20:20:52.697089Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"d8a2305a71cf6385d83ed606411f58dc","sha1":"cc26d62a9c807afefb1324dcb5b04e27458e257c","sha256":"9ca4556afab8e3be6cecd3448ef9d7b43228c9d9c713af3b4f39904f5bd01b93","sha512":"73814adfd6402e3d474a235696af33044befa95a47db86ba643c2d7e85caf05de05c61b5174b00beb081a9818994bd0fc061fa1004b15790468ba55f9412b8d2","ssdeep":"","tlshash":"bfc08ccaa0c26d101a0a761010af24e49024402b70486b12acd4e8492e620b08233e98","size":145,"data":"","first_seen":"2023-08-02T21:25:39Z","last_seen":"2026-08-28T20:20:52.726148Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/#/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"170c5aeb0fbfa79ec106e76acce07132","sha1":"9f1adc3b20187ce77b33f5b3c827b562c51a2e3a","sha256":"72311d09d22498f16737e60fa68d33cacc3e2e71ed5fc46d7559a1808efbf6c6","sha512":"205075024aef7f373dfd51895391f57c00b4ea5ce1f7289df4691c60ea0850871539fc06351f38277a3abc389c261344444c80159cfeae6d8ed36a7ad2e594af","ssdeep":"","tlshash":"d8c08cc8a0e32d001602641010bf38e49025802670481b168ca4ec483e230f08237ea8","size":142,"data":"","first_seen":"2024-09-19T22:02:28.526617Z","last_seen":"2026-08-28T20:20:52.720501Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xygjh.com/","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:31:28.934Z","timestamp":1787927488934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 07 Aug 2026 08:43:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759aba-f7d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3965,"size_decoded":1902,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1001), with CRLF, LF line terminators","md5":"8b6b2367718c0a531bcce2532c1cacbd","sha1":"e22a0bbf53444b0d60832d4b8a318d87158b4222","sha256":"4aa2809d79684a0bfc0ea732655f709478a6780dd9dcdf8b8b6099becc4dd638","sha512":"ac8f125e1ad6ba2d15dae98529ac0b93e36da808150cde25c77b33d068e1b4f131826b5ae030f561e5d73af019071791ddcb855b586880748b0845df03182eac","ssdeep":"","tlshash":"538151b39da0983a23b1176bfe9bf01c97608642851a4c54b4dc50fb4b92fd5c8d7b3a","first_seen":"2026-08-10T18:17:41.066282Z","last_seen":"2026-08-28T20:20:52.684055Z","times_seen":16,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":86,"connect":254,"send":0,"wait":254,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-81fc9a92.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.829Z","timestamp":1787927491829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-81fc9a92.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 777\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\netag: \"6a759ab8-309\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":777,"size_decoded":1296,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (776)","md5":"6836078dc379bc58aa6e1f4ac820dbc8","sha1":"54c4f7fbf507ce1e88ffff6230739ad7eb49fbc4","sha256":"e96a15149fa5d9c95dd4d2a96fb9dea09c99031c86231d3aff0aeede2872ed28","sha512":"61e800bf25fad2492557f9de2e95e3bf306fed559a3e1399b3994a82eaf110f9721c25c774c9bd37ff67edb47ecd9a887eab6ae5e86d58f04f1b94072d5d1178","ssdeep":"","tlshash":"7d0120f9fd2eceb75fb2484402d0264515490fcef96218f988973e6117e2c918ace70c","first_seen":"2026-08-10T18:17:41.070138Z","last_seen":"2026-08-28T20:20:52.702435Z","times_seen":20,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/XAU.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.235Z","timestamp":1787927493235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/XAU.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 5689\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC67CD23C35377ACB1F\r\nAccept-Ranges: bytes\r\nETag: \"B677EE0AA330435B76891D09D38623EF-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:01 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 12003613704444461773\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5689,"size_decoded":6204,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"78023b21da9ce237163e08caa29fe872","sha1":"876edfd939d4a973b444d8a4d4335ab2dcc19928","sha256":"3644e5a3a2696cf6c4e85fb4d04428c7eb4bd20487f2a4b8d42fc76738da321e","sha512":"c0fb8b947f769cb26667778e55cba17741810454b58c8d58e934d1be23eab2fc875d522f5a04cce3458ba3220b7839cec2e867f6091fbf57062744f0d816aa6c","ssdeep":"96:IhO6EVCrEvXz44/K6jtNV50OsEw5aGS2zQODMR6tybJoyOsCw1uwDUx+IeNXRcEz:IhO6E9z4eK6jtNzwgGVQA8KxmMN92XWq","tlshash":"78c17e2b6b4d6811dcb914b481e0f15dd6077f75a29b2c0dadb22894b1d4deb0c30b8d","first_seen":"2025-08-27T06:41:40.796854Z","last_seen":"2026-08-28T22:30:35.456533Z","times_seen":38,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":-1,"dns":0,"connect":277,"send":0,"wait":280,"receive":0,"ssl":840},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.243Z","timestamp":1787927493243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3115,"size_decoded":1059,"mime_type":"application/json","magic":"JSON text data","md5":"9d7eb832c94332cded51413956ab15db","sha1":"46278bc0f227dd5e74bc4e0f8a8756ae9ec4bcfd","sha256":"8b92f8e1767cc2fb91705db5999e8de36435749f4c1ae0a223fea124d8b83c8d","sha512":"d83ddd38ad88ff30f1e1275050f73d0dc7f0e603ab77a2e0ea6314be8c2c8a73d4853aa00c675ae1778809ead297f5a49a756047aa0496b50912962ab213366b","ssdeep":"","tlshash":"40517e4f2138cea9090948c7a4cdbdc9d79e2b87d660cc34a667cf6c45f69bb0f0a548","first_seen":"2026-08-28T14:00:31.575802Z","last_seen":"2026-08-28T20:20:52.710292Z","times_seen":14,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s0fa38f6fc84f4cb0ae61e355f6d3fc14.jpg?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.786Z","timestamp":1787927493786,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s0fa38f6fc84f4cb0ae61e355f6d3fc14.jpg?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 74674\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC78B90443331CC6A45\r\nAccept-Ranges: bytes\r\nETag: \"03524350C51B5F53B5C2AC0C71857FC8-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 4702179474247024364\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":74674,"size_decoded":75190,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x563, components 3","md5":"fafa807452d842cfcac10961a5fdfc41","sha1":"206e9e40d4b8883656cdb13be8b8d1129896059c","sha256":"1bc4846b6c08b53aa57fad8d6448f7da8ccff03b0fab3651cb9555e3486f7ed7","sha512":"6768a9911750c81142d045d5ef81b245b180d14dbc9c71931d3df61cb08c08522a5ba819cbf4bb3db23c3578b75fb3987b6137c81d89cf9444b703306764dcf7","ssdeep":"1536:Qb7RUA4PtJ1QCTpqx5DQG9sEO6IjLg1KMa+I8aM8qXV2Dy4OfC621qdfP6d:oG7qDEaEJ8zVFaiCd","tlshash":"e07302e209743dbbab48515081f5c92fe99cf8e1eadf6a8a11617eee4084ed90914cf4","first_seen":"2026-08-10T18:17:41.076122Z","last_seen":"2026-08-28T20:20:52.718657Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":1406,"dns":0,"connect":0,"send":0,"wait":283,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/vendor-f7ad3d94.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:29.967Z","timestamp":1787927489967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/vendor-f7ad3d94.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Aug 2026 08:43:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759aba-e7064\"\r\nexpires: Sat, 29 Aug 2026 02:31:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":946276,"size_decoded":319083,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b7ddd11c1ced29cf52fc014611d032ba","sha1":"b1fd6ee918464c9051e78381b65d44afd208749c","sha256":"4088166944364d76a1b3378a26b7d5e6fd56db5e312d37098e483590453b5b9c","sha512":"ca20c097163cdf78b30f82a87461c7a067d8e2922c4c36be7192dfff90bc66dc80bf4b404f011ecf82704e146a9c38595abf567644edb1fdc0fdde46b3ca2921","ssdeep":"12288:rUDfK9jcSx8+wGxIvYeogPxsyLX8Q2TCv3aG1p1dPvcOk:4DiNB8+wGxIQeogpVgQ2TfG1tvcZ","tlshash":"d81538c87196b0a143ab14e150bb0107f3396e59744d84a8f1add8eb3eb9d4992b7f3c","first_seen":"2026-08-10T18:17:41.068493Z","last_seen":"2026-08-28T20:20:52.717327Z","times_seen":20,"resource_available":true,"data":null}},"time_used":1065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1065,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/resource/fonts/Arial.ttf","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.512Z","timestamp":1787927491512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xygjh.com/assets/index-44aa422b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047469,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-08-28T20:32:07.763636Z","times_seen":2302,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":442,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/cny.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.233Z","timestamp":1787927493233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/cny.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 284610\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6AB6732333815E510\r\nAccept-Ranges: bytes\r\nETag: \"6DF3B1FE385267D23462EA1C8016EED7-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:02 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 5059615565199925151\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":284610,"size_decoded":285126,"mime_type":"image/png","magic":"PNG image data, 645 x 613, 8-bit/color RGBA, non-interlaced","md5":"500df2fa65029a7ad493cd1fd2884312","sha1":"f214a144fd861f5ae262dc4167961dd83d691a16","sha256":"45d07f737c61177b3274a228b9a5ed3bcd0ae247ecbc0d5f63a1cf8c125289fb","sha512":"d027ba1f51c5821dd080e184d5ebf58153a6a6fbc32785acad04ad9598f46dae061fb66910c03d540a7484141887cdc22b4e69c204708b0abde99012a87df0e9","ssdeep":"6144:lY/qKbVYe8GBr1ETvyNGU9beURit7ztPBnyA8nTzv6nQ:i6e8GVaLyNGUwAitfR9JEv5","tlshash":"4c542364cb4b274b62c0ac35586c3a4093e36f746d888b7f1da1cd4c61dc682bfd9e89","first_seen":"2025-12-28T09:27:47.904384Z","last_seen":"2026-08-28T20:20:52.69109Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1945,"timings":{"blocked":-1,"dns":3,"connect":270,"send":0,"wait":278,"receive":576,"ssl":818},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/solana.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.240Z","timestamp":1787927493240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/solana.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC68B904433319C6845\r\nAccept-Ranges: bytes\r\nETag: \"66097E4D53F2C9A9E6190485EE9F205E-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":26165,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-28T22:30:35.413233Z","times_seen":992,"resource_available":false,"data":null}},"time_used":1363,"timings":{"blocked":-1,"dns":0,"connect":270,"send":0,"wait":273,"receive":7,"ssl":813},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/coinInfo.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.244Z","timestamp":1787927493244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/coinInfo.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC68B90443331646945\r\nAccept-Ranges: bytes\r\nETag: \"F7B4D2C5D192D4483F6B70056D8D8689-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:02 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":56243,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-08-28T22:30:35.390302Z","times_seen":976,"resource_available":false,"data":null}},"time_used":1639,"timings":{"blocked":1321,"dns":0,"connect":0,"send":0,"wait":285,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/ripple.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.249Z","timestamp":1787927493249,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ripple.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6AB4B813830520419\r\nAccept-Ranges: bytes\r\nETag: \"F14A046BDF7107AB2C4D02341AF18A4F-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":2788,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-28T22:30:35.455708Z","times_seen":943,"resource_available":false,"data":null}},"time_used":1871,"timings":{"blocked":1595,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/type/defi_activity_type","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.275Z","timestamp":1787927493275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":635,"size_decoded":723,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-08-28T20:22:39.967948Z","times_seen":843,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/platform/dev/logo_144.png?2.0.1786092215591","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:32.523Z","timestamp":1787927492523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1786092215591 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 04 May 2026 08:12:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69f854e4-bb2\"\r\nexpires: Sun, 27 Sep 2026 14:31:32 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":3502,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"9021b58279c1ebc8e4b11f205b1cf766","sha1":"cfa7c545033c6d652b24293f33c0223965ebd232","sha256":"84e87d2d4c2929e8e66cbe3e69e011af1c29654ea76c0cc87532c5d6daaa64b1","sha512":"4377534fe4104351da94b6955ab2ee08959c848b03049a9f3899a5a2a1fc23ca6485e463c28b039abe171f6ba669ba72fcc34c45c975d8a4af431a79bcd9b509","ssdeep":"","tlshash":"60512da36422f285a74a3072c34f7f22d6759852870b4929e7dc94091d15f170e7efa6","first_seen":"2026-08-10T18:17:41.052274Z","last_seen":"2026-08-28T20:20:52.658647Z","times_seen":16,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-7f972a48.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:29.966Z","timestamp":1787927489966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-7f972a48.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Aug 2026 08:43:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759aba-104825\"\r\nexpires: Sat, 29 Aug 2026 02:31:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1067045,"size_decoded":330334,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58717), with no line terminators","md5":"068e6ce03d6afa2ec73b6fac80d5a509","sha1":"fd4272457aed87e035a6c6f72eafafacb1038872","sha256":"11208ce466b62bd11f4acfea9b041d37a9047e608bc19668a03eb33bcd3b7411","sha512":"7c19f1e6acf4527ce6e8c0fb21c6f9cc909e31b14f886174e7bc0a57bc8ea036a2e15a3bb2b036529f3924062c8f4f22d9a7c9b0c81964ada1d7bee3d7b9b75e","ssdeep":"24576:1Ja6gl444iGOaqoI776gPJQ5+duMaU6S+X5oPo76Bq:10R+iGOaqok76EJQ5+duMaU6S+X5oPox","tlshash":"27356b992ee9a89d04f72a2bb48d7a3150fa0da1d355c0d60fec96f862d1f139357b30","first_seen":"2026-08-28T14:00:31.702428Z","last_seen":"2026-08-28T20:20:52.678484Z","times_seen":11,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/getAllSetting","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.819Z","timestamp":1787927491819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":498,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":29,"connect":241,"send":0,"wait":242,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-5a0c4154.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.827Z","timestamp":1787927491827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-5a0c4154.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-1328\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4904,"size_decoded":2701,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4895)","md5":"019b0cd18183566bba4e85a1717e22ab","sha1":"8d32e62c513d4fd494e18f8625c389014c6c6cea","sha256":"9615ea877ecc63e471bf7010a0e3e5fdd35d14e392bf639bd01b951218dcbcc9","sha512":"deaf721d155471e7674f2fad21a542e2c36a45f0b88609120d845c0d64cd6abe8ef3a0447edc42faee47ccab7f09664fdce0778fe1f4526a9bd8bf6467662c9f","ssdeep":"96:uoS1b9aFYvwNVGkulD7hoPk5Js7a37IDwvn3hquveC3RKEu7PGc2Ww:uoS1b9+YvwNJKXhoP6f7IDa3hqDyRKE7","tlshash":"5ba1938cbc06497ab677188044880921325c2ff2622988f2f2fdee6613e5d79d78477a","first_seen":"2026-08-10T18:17:41.077076Z","last_seen":"2026-08-28T20:20:52.697089Z","times_seen":16,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/bitcoin.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.239Z","timestamp":1787927493239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bitcoin.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6AB4B813830140319\r\nAccept-Ranges: bytes\r\nETag: \"4BBB774073C62BF09C1C868309DD41D9-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:02 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":3205,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-29T17:43:23.897085Z","times_seen":26147,"resource_available":false,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":0,"connect":271,"send":0,"wait":270,"receive":0,"ssl":817},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s7c8aa40bb76d477da70bc7b8e2f7ccf8.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.264Z","timestamp":1787927493264,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s7c8aa40bb76d477da70bc7b8e2f7ccf8.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 3668\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7C78BAF333828847A\r\nAccept-Ranges: bytes\r\nETag: \"FA89A2CEA985AC0475E0356A02A2A5D2-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:44 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 10484738173944458253\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3668,"size_decoded":4183,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a60a6e1b1774ab016edf208b254728e8","sha1":"4c81170331bc0f984c0100cf38abb2ec456ad89c","sha256":"d93d2738cf78a7056dae68db2bd09605792b34f49836ec418cccad8c86ea76ea","sha512":"3f55f94b9f743166f9167da71bff63153a257210a502125a6315654443f3046cf9f9e03b87b1cc51951baf540d4151aad42e37b56ad1e78933db693bda13f1ed","ssdeep":"","tlshash":"ec717dfdb1a8aa0cd45563379a7fc1819ca57f9e0c6ec96fb81e87e117ac00d10e0a59","first_seen":"2026-02-01T01:46:44.947233Z","last_seen":"2026-08-28T20:20:52.670602Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1907,"timings":{"blocked":1629,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025sfbdc6c6199b5411685dfd573e01f8a30.jpg?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:36.818Z","timestamp":1787927496818,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sfbdc6c6199b5411685dfd573e01f8a30.jpg?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 122810\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC8AB67323338EAE910\r\nAccept-Ranges: bytes\r\nETag: \"CF73A0AFDAFF55C6F8C74658041929C2-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 13281297701441432279\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":122810,"size_decoded":123328,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x735, components 3","md5":"7135cdaba23b27fe942c8539e22d0b59","sha1":"f405520dab443f53e9a2f4c5262fccc5fbd3ac39","sha256":"487ffebbcc0e65bac8531b9d63b674ac3076e003ee1b69d718a7bc77133e8698","sha512":"2f919d0bf64dd72d1d7ac877893003f8cadf1e96dcb2451b05dd71074fb5b94d6753b6e623cb89dc398de3a5c6697ca087989dee4e0f177466ed941eb952fa62","ssdeep":"3072:t4Q3zHiZQ380z75ITWGSJ6jpTYCCmHdC5tbyV:t4RZB0zmT1SJ6jpTYCtCiV","tlshash":"3dc312e8cb108551cb311371dea6ffc798058ccbf8a6565a9374e0321be51b4ce6a8f9","first_seen":"2026-08-10T18:17:41.04718Z","last_seen":"2026-08-28T20:20:52.677842Z","times_seen":16,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/platform/dev/config.js?1787927491775","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.809Z","timestamp":1787927491809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /platform/dev/config.js?1787927491775 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-18a\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":913,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-08-28T22:30:35.383101Z","times_seen":541,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/currencyItem-15550dda.css","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.837Z","timestamp":1787927491837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-6d6\"\r\nexpires: Sat, 29 Aug 2026 02:31:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":1014,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-08-28T20:20:52.698725Z","times_seen":456,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/resource/fonts/DINOT-Medium.otf","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:32.974Z","timestamp":1787927492974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xygjh.com/assets/index-44aa422b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73096,"size_decoded":73551,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-28T20:22:39.981947Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/resource/svg/light/zu447.svg?2.0.1786092215591","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.230Z","timestamp":1787927493230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1786092215591 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420,"size_decoded":860,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-08-28T20:20:52.655056Z","times_seen":505,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025sdb75e6458336447fb051734e82eba2fc.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.268Z","timestamp":1787927493268,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sdb75e6458336447fb051734e82eba2fc.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 7514\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC78B90443331206A45\r\nAccept-Ranges: bytes\r\nETag: \"13033EA6C58725B72D798E1D1BB9BD1F-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 15527257983622601881\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7514,"size_decoded":8029,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"81d78026d3724b07890b98bec4cc06fb","sha1":"58f8311e23f02b4e2af8c547cc7d3df9959d125c","sha256":"ed77ffbe2e7519bd091021725155ec2d03fdc780dec3f220acbf647720106c49","sha512":"2e82f036189d4e1763a0365f5eed4597b80ec73219b92568ac2bcdeddfa8608edc76193a829335ba525506d7accf0d1f6b08432dbaad4aa1406e42f8c5a742ed","ssdeep":"96:t7AxPstkZIys03+LO9Qp/l32WE6FsBpSaJzZtqGeluuwRJmWn5ycUgJ7KnGup:gkKIysIqRl3ZFS0GeluuLo5c0KGq","tlshash":"4ef1afee26888bdb48d5d988a9c627eac07e32154ea51fc9e41350d698901cc35dc7d9","first_seen":"2026-02-01T01:46:44.959485Z","last_seen":"2026-08-28T20:20:52.700386Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1909,"timings":{"blocked":1639,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/getAllSetting","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.285Z","timestamp":1787927493285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":508,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s8081d617709f4fd6bb368392c0807f30.png","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.288Z","timestamp":1787927493288,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s8081d617709f4fd6bb368392c0807f30.png HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 2994\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7AB6732333890E610\r\nAccept-Ranges: bytes\r\nETag: \"BC965066DFB140C531C8B5BA5867C8A9-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:44 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 10284066611914995262\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2994,"size_decoded":3509,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"9021b58279c1ebc8e4b11f205b1cf766","sha1":"cfa7c545033c6d652b24293f33c0223965ebd232","sha256":"84e87d2d4c2929e8e66cbe3e69e011af1c29654ea76c0cc87532c5d6daaa64b1","sha512":"4377534fe4104351da94b6955ab2ee08959c848b03049a9f3899a5a2a1fc23ca6485e463c28b039abe171f6ba669ba72fcc34c45c975d8a4af431a79bcd9b509","ssdeep":"","tlshash":"60512da36422f285a74a3072c34f7f22d6759852870b4929e7dc94091d15f170e7efa6","first_seen":"2026-08-10T18:17:41.052274Z","last_seen":"2026-08-28T20:20:52.658647Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2163,"timings":{"blocked":1889,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s2aadbf1da43f4f968827d10415bd76f5.jpg?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.783Z","timestamp":1787927493783,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s2aadbf1da43f4f968827d10415bd76f5.jpg?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 71714\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6C390C3393521C759\r\nAccept-Ranges: bytes\r\nETag: \"13F0E533D953E367A26FDC5F742F8373-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 15685900613189509284\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":71714,"size_decoded":72231,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, comment: \"XML:com.adobe.xmp: \u003c?xml version=\"1.0\" encoding=\"UTF-8\"?\u003e\u003c?xpacket begin=\"\" id=\"W5M0MpCehiHzreSzNTczkc9d\"??\u003e\u003cx:xmpmeta xmlns:x\", progressive, precision 8, 1280x1280, components 3","md5":"1436b92746483836c4507cd086d04ffe","sha1":"a0e8fc412ee5728bda907388343000a02f52427e","sha256":"3f365e03e903f1027f04721a0eca019e0c4f19fffbd8fde7fe0d83a92ca0033b","sha512":"32b2e4eaebbaebc177f87765f062758428169595d1bc61c6f3b9e865889b58e97d93fdc6b55a4c808fb1cc84146e3654effcd0ad52d50ea864f9d68e6fb0e38a","ssdeep":"1536:EBjZUZjFJn9G5b7aPU3hjB/HhX+JVRzso+7sOnsZzvdXw:4j+FJ9Eb7/zpKv4o+7ssAhA","tlshash":"7f6302a2c79d1419e66c2f31c11b633b7925bfd05355c6fbcb88a392c0b8af89c1e505","first_seen":"2026-08-10T18:17:41.046151Z","last_seen":"2026-08-28T20:20:52.695502Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":278,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-bc011be9.css","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.831Z","timestamp":1787927491831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\netag: \"6a759ab8-18d\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":902,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-28T20:20:52.697986Z","times_seen":1523,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/resource/svg/light/mengbanzu12.svg?2.0.1786092215591","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.227Z","timestamp":1787927493227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1786092215591 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-322\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":802,"size_decoded":1242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-08-28T20:21:12.171777Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/resource/svg/light/mengbanzu13.svg?2.0.1786092215591","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.228Z","timestamp":1787927493228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1786092215591 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1c-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":1062,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-08-28T20:20:52.715886Z","times_seen":966,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/XAG.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.237Z","timestamp":1787927493237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/XAG.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 2529\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6C390C339356CC659\r\nAccept-Ranges: bytes\r\nETag: \"233180C6B4D37F86C3936960C12BDB34-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:01 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 7608553484274307565\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2529,"size_decoded":3043,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components 3","md5":"a0a6e00af7b14494616bd030518e4552","sha1":"69f0fbe82c630d55e02834f41bd21b26a2812400","sha256":"d65a77c83c74dd4a79026135658cf502446f5755d0dbb1741f1c52d5ce1b1513","sha512":"4349094b978569520997d74907c84156c149d69b6c9f736a32febabee136c8d79bc16e3d0ae65be717aeb9228535f56248667778509c372fc2ed9d73f8b4588f","ssdeep":"","tlshash":"84511a69ceb024d6ccb8c47da2f363a2ef963322ec8455a2d047119171372c06c9788a","first_seen":"2026-02-19T15:44:21.829778Z","last_seen":"2026-08-28T22:30:35.457327Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1084,"timings":{"blocked":-1,"dns":0,"connect":267,"send":0,"wait":277,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s028916936891448ca9cbd361078f6b99.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.272Z","timestamp":1787927493272,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s028916936891448ca9cbd361078f6b99.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 4096\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7AB67323338F5E610\r\nAccept-Ranges: bytes\r\nETag: \"9526C16B3796900E7FB550BB03E766FC-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 14843586186598874018\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4096,"size_decoded":4611,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"905af5999e8f9881b9914f01c041ba82","sha1":"f4c4e874e1fc6f89b92228def6102cbc4a9f0046","sha256":"5386a09dc29d78eced3974bda647c0a90d5c2346889fcd682a9de81cbbd26c54","sha512":"81427b279bbe735e327afac1d166f002086c4a06363970db0bd48d4298120ee139e0d95c94f391c730a6ee62de1f183409d48074378e405f1e23ada7bde14f62","ssdeep":"","tlshash":"ff816d13bd0b5e0b514fb358c96ce0f0473e83e467a206a6c7db1bcd40a509b9978665","first_seen":"2026-02-01T01:46:44.939166Z","last_seen":"2026-08-28T20:20:52.693802Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2444,"timings":{"blocked":2167,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s68fbd5a509a34f3285eb783c6a3db2c7.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.274Z","timestamp":1787927493274,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s68fbd5a509a34f3285eb783c6a3db2c7.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 4096\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7AB4B813830D30419\r\nAccept-Ranges: bytes\r\nETag: \"9526C16B3796900E7FB550BB03E766FC-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 14843586186598874018\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4096,"size_decoded":4611,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"905af5999e8f9881b9914f01c041ba82","sha1":"f4c4e874e1fc6f89b92228def6102cbc4a9f0046","sha256":"5386a09dc29d78eced3974bda647c0a90d5c2346889fcd682a9de81cbbd26c54","sha512":"81427b279bbe735e327afac1d166f002086c4a06363970db0bd48d4298120ee139e0d95c94f391c730a6ee62de1f183409d48074378e405f1e23ada7bde14f62","ssdeep":"","tlshash":"ff816d13bd0b5e0b514fb358c96ce0f0473e83e467a206a6c7db1bcd40a509b9978665","first_seen":"2026-02-01T01:46:44.939166Z","last_seen":"2026-08-28T20:20:52.693802Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2143,"timings":{"blocked":1869,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.284Z","timestamp":1787927493284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":508,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s2da29146e9f842d98b39400d763cd5af.jpg?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:39.821Z","timestamp":1787927499821,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s2da29146e9f842d98b39400d763cd5af.jpg?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:39 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 89097\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BCBAB673233387AEF10\r\nAccept-Ranges: bytes\r\nETag: \"C87A8776F71E0B858EC5A3272B2EBAB7-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 10505883599700459275\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":89097,"size_decoded":89614,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 948x1280, components 3","md5":"0314789f31ee367a9ba4a9fdba749f11","sha1":"95ed40f330aa722a5091f9fa048dc5950fa5d59b","sha256":"c4a1f87dc85a1c02e9f2a76e28295000c3e347f4fd84620725f85840502eb75e","sha512":"f4850984263746303b8504b2d27074135d979bde9e6b88d6b251e31ce50a2d1cd58bf6e5d3c4bb97711dd070cad33ddbb4c4bc9aea2b9769021b2ac4398c3e0c","ssdeep":"1536:np+pv2oKhj+dPvOS3ZSfFxsh92J96IF9L+2f6MNWy5Y8FsVszPggk/kGIRX4Pjww:np+vQj+dPWS3EscbbL+UNT1K9MGIRX4f","tlshash":"f4930242e319a5ade9353332287f2618473bc670771706051a3b4b116ffb0c5beabba1","first_seen":"2026-08-10T18:17:41.040901Z","last_seen":"2026-08-28T20:20:52.682338Z","times_seen":16,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-44aa422b.css","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:29.970Z","timestamp":1787927489970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-44aa422b.css HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-4abd3\"\r\nexpires: Sat, 29 Aug 2026 02:31:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306131,"size_decoded":66903,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"6ab59c33b2c807b6057b33368775d0e4","sha1":"a7a29db128903a4a3ea46c8d650bca7f8abd172d","sha256":"44aa422b7e9c9bd329ea29e62a5b37635c067adab93b311a19b997cd7f4aa3c9","sha512":"7d25fda2e8c639f65618b5fefd70732e5e19ce671d8ea8c867476347badbd36c42875a30c722f72164468f0c1700f503246b61ad3ce0ecff9a28c8028c1fe849","ssdeep":"6144:nBvxsal1W9zkZ8w71ZACkFDS3vyf58rBeV05TF:Bv1C9AZ8w71ZACkFDS3vyf58rBeV05TF","tlshash":"2254d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-08-10T18:17:41.080135Z","last_seen":"2026-08-28T20:20:52.701035Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1063,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-c68575d9.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.822Z","timestamp":1787927491822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-c68575d9.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-3251\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12881,"size_decoded":4697,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12880)","md5":"8db66493584cbb588ed46d561d9e589c","sha1":"8d7b1a0c8821642078096d0af6d841e76ceb9d27","sha256":"79012b0995e77f48d5d838a92ec668cd406ab58e5d3fc729321406bb31519695","sha512":"bb7addda4a51a9d38fb8bc09d496d035e1fdc60dda97501b870b461b81043926b05c0fc45ebaadd952b13a9620b325d819adee689bd9a92cbb7fd8b15f5d22b2","ssdeep":"384:EQ1zLZK8R+1LA6usrjdLE2WF09fV4yIITzHt8d68W+CtD:EQdNR+hBbC09fVtWg8W+6","tlshash":"1842b559f40a4a7ef6b7d05520480400b20d7feb60068db3f2bdbe942792db8a75e728","first_seen":"2026-08-10T18:17:41.082096Z","last_seen":"2026-08-28T20:20:52.714394Z","times_seen":16,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.261Z","timestamp":1787927493261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1571,"size_decoded":1281,"mime_type":"application/json","magic":"JSON text data","md5":"8bf6d6debebd558f88e7fd7f6c76edd5","sha1":"156b04730d007ede3fb3d413723f8bebdd058f1e","sha256":"8b8ce0bf4bf9f3eea75f350b42ab9dc518a775f26cffe036367e27e22681a956","sha512":"cad35030cc60337e32226e7df7d0b738617c3141d818ec31f3529cd5bba796d3ccc36009d88b4c0f96f44857b7b03781e352cbfb4bd15b753760a76c71005c59","ssdeep":"","tlshash":"fc31ec1d243e8e7d180544c7918dbec5956e26a7c974cc308aafcf2c43e29bb4b0a54a","first_seen":"2026-08-10T18:17:41.056271Z","last_seen":"2026-08-28T20:20:52.711082Z","times_seen":15,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s2c035533adaa4f4098389bdf78a29fae.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.271Z","timestamp":1787927493271,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s2c035533adaa4f4098389bdf78a29fae.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 10004\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC77CD23C3537ADCC1F\r\nAccept-Ranges: bytes\r\nETag: \"14CA16BD21ADC657F96995BEB2A2A7F1-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 15097534368846664219\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10004,"size_decoded":10520,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"cb30efeedc5d285c5723cbf9ce028c9c","sha1":"053b2fea307d5804388ef15e48147cbfb1a546cc","sha256":"eaed459617459a6d84ed4b064d3c2a346302af1dbfbd294badb28b4c30ccde26","sha512":"aba6f5d524f0d8c7efda7e8e0ec4706dd71026bd039cd8fee95c38b1ef9c8253c07dc87092ba8d7f921e70a2da155519c830e1e5301d036bcf8a8921f4196377","ssdeep":"192:ztqfoxt0muL33wWyUxL9xQku46kpGfeUv/dP55/AWQBGES92W12gI:znYmQnrykL9bqhZ5eWj2WUgI","tlshash":"cc22c00a19790e5ac86a11795f2ee8e522f4d7b6c4f0829e7949853cb2e3394c8dff40","first_seen":"2026-02-01T01:46:44.935988Z","last_seen":"2026-08-28T20:20:52.705098Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1941,"timings":{"blocked":1653,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s3ab0068a68084af5ab3bded6563d2799.jpg?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.784Z","timestamp":1787927493784,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s3ab0068a68084af5ab3bded6563d2799.jpg?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 89693\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7C78BAF3338B6847A\r\nAccept-Ranges: bytes\r\nETag: \"FF030766164B03532E07AA71FBBA3B91-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 9784055940628989931\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":89693,"size_decoded":90209,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x733, components 3","md5":"ea8ee77a4fabbdee50e875855acd8abb","sha1":"242b1744964832a850accd445370018ecf4f06f6","sha256":"2c17ced708c31eefe4186f033a6b64c563b9013b6ff96cb358b1172303896463","sha512":"7bc8bf1105b6c66d1e97b328ae01ce0fd2c27217cab32315d98d4fc9a53719e1da0f8b3284f90ce6a6dce9ec311b79bfcbc4307fa368b846459199b156e99bc5","ssdeep":"1536:bpA/IncvArfLFpiHRfMulma9AImwm9BMXWjmfVKmRUZophaZWcziBy:6KNritRAIm77aL/giBy","tlshash":"3c93023d27b6bd18c54c5c2b412a5b269337fede655ee29316308c00dce69b84d4daec","first_seen":"2026-08-10T18:17:41.075299Z","last_seen":"2026-08-28T20:20:52.716683Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1974,"timings":{"blocked":1404,"dns":0,"connect":0,"send":0,"wait":288,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/getAllSetting","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.810Z","timestamp":1787927491810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11505,"size_decoded":3650,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11173), with no line terminators","md5":"e58319721322a470cde1796cb7563a7a","sha1":"0f99f9b48984375ce5f3da8232dd185ca6072446","sha256":"9759cce6240be04358984b8d9b977c08c5b77bcc1a68bb6e0ef6a84921ceaf07","sha512":"e6e24462ff189e5b9608eb095283f123f612ba21db2df57e1109a37fea1e6876baa02e706061251bc6c9e0ae7616ebe1fabb4222357b813ab7b0bd3ee10dcecf","ssdeep":"192:kIj5HMOFpj4KYS+Rb3uc2i1VBK8FTWei9WQHXA9vKVax1Wv5QX2svS5fMf4Gn2WA:AuGjD8FVHoigx1f2rRMAMDZDryKem2gQ","tlshash":"5f32654f31d8ccfd83d619c5d0ab394eb59c386bd980dc45f8a3ee5c989a9b3880b019","first_seen":"2026-08-28T14:00:31.586145Z","last_seen":"2026-08-28T20:20:52.671703Z","times_seen":14,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s9dfe1ee2f084403883324503e53bb1eb.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.270Z","timestamp":1787927493270,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s9dfe1ee2f084403883324503e53bb1eb.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 10004\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7AB4B813830420519\r\nAccept-Ranges: bytes\r\nETag: \"14CA16BD21ADC657F96995BEB2A2A7F1-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:44 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 15097534368846664219\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10004,"size_decoded":10520,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"cb30efeedc5d285c5723cbf9ce028c9c","sha1":"053b2fea307d5804388ef15e48147cbfb1a546cc","sha256":"eaed459617459a6d84ed4b064d3c2a346302af1dbfbd294badb28b4c30ccde26","sha512":"aba6f5d524f0d8c7efda7e8e0ec4706dd71026bd039cd8fee95c38b1ef9c8253c07dc87092ba8d7f921e70a2da155519c830e1e5301d036bcf8a8921f4196377","ssdeep":"192:ztqfoxt0muL33wWyUxL9xQku46kpGfeUv/dP55/AWQBGES92W12gI:znYmQnrykL9bqhZ5eWj2WUgI","tlshash":"cc22c00a19790e5ac86a11795f2ee8e522f4d7b6c4f0829e7949853cb2e3394c8dff40","first_seen":"2026-02-01T01:46:44.935988Z","last_seen":"2026-08-28T20:20:52.705098Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2427,"timings":{"blocked":2143,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/vendor-4b39a398.css","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:29.968Z","timestamp":1787927489968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-16c35\"\r\nexpires: Sat, 29 Aug 2026 02:31:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93237,"size_decoded":38272,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-08-28T20:20:52.685823Z","times_seen":268,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1064,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/filters-ef417436.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.834Z","timestamp":1787927491834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/filters-ef417436.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-1095\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4245,"size_decoded":2275,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4244)","md5":"83871d39d9589766996dab7a57a2ef88","sha1":"f60969e759f4e5f5ed8aad15fe5892762175bffa","sha256":"ce488d8895d6122bbc1c6ccef9af7a2d6e614b004888d61039d5b8a0e3d85570","sha512":"3acace1dd88d9a4d792c0695aa56a55121a3406d7090551cc1ea6ba11a21485d72b18a5f85f16f7e4615fe6b05be90b930e84276a63d7f7e9ea07c4f8827ed1d","ssdeep":"96:nkHZamDUy1Uy0ywk5UkBC66YVIr7DsFRi83O1WrhBr2N55HUimyW4zs9a2k7FDbT:nk5hFDJX5pw7pONlN05BmXws9Tk7FDbT","tlshash":"839186ecb6d36033a7ea29ea541a4424f08efc057c0f865de5ab9491be63044d07f724","first_seen":"2026-08-10T18:17:41.082977Z","last_seen":"2026-08-28T20:20:52.707509Z","times_seen":16,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-1be855a4.css","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.838Z","timestamp":1787927491838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-1be855a4.css HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-274d\"\r\nexpires: Sat, 29 Aug 2026 02:31:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10061,"size_decoded":2569,"mime_type":"text/css","magic":"ASCII text, with very long lines (10060)","md5":"afaedb2b618c3dd929e8153802c4bb08","sha1":"22925bb2de436a2e95482460faf24eb1f861ce09","sha256":"1be855a42d190e4dc3fc8ac037275dfdda85356cc325d289659245c9cde4fb4f","sha512":"e5fc2f0e21cb754e5af500e1e05d67fda74a56ab15e1686d75bb4d10274d6792c2a8e7195a046823ea8139a99c5e4e939e7179bafb976ab83ffc80f298b8294c","ssdeep":"96:AERIdUG/ezOETj+jXMp5mXUVM2tL0a5OYOb/62rGgAcM45wMpLtUKqE2:AEA/ePf+EYvWavMAwMpLtUKe","tlshash":"0522552cf3a42738ac37d1957be849ccf20ef921d6539da4e66795220dcb6e31a30589","first_seen":"2026-08-10T18:17:41.078197Z","last_seen":"2026-08-28T20:20:52.690131Z","times_seen":20,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/resource/svg/light/user.svg?2.0.1786092215591","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.223Z","timestamp":1787927493223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1786092215591 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 551\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-227\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":551,"size_decoded":991,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-08-28T20:20:52.674687Z","times_seen":453,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/binance-coin.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.263Z","timestamp":1787927493263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/binance-coin.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7C390C339353DC859\r\nAccept-Ranges: bytes\r\nETag: \"AA1655FBE9EFA39602CA4FD010EE6EE4-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:02 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 33\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":13386,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-28T22:30:35.426912Z","times_seen":984,"resource_available":false,"data":null}},"time_used":1926,"timings":{"blocked":1621,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-d979c7c1.css","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.832Z","timestamp":1787927491832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-d979c7c1.css HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-a01\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":1272,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"2a204a3d23d55f83a79674497a8b3def","sha1":"3cdc4526def5a1838932ecb857f23c8896ef0bab","sha256":"d979c7c16e275d489c2f3ae959e8a944459f1ef620534328df57cee264cfb95b","sha512":"0c9442acb83c31186b576be2b3345000256ebfe14f0e09ccd16204ba600a4160f3e0ae0685ad7f70e96445a73e387c8c4e2b72afaf4239d971506d2db41208a7","ssdeep":"","tlshash":"7151424cfba415305d77d98fee684b8cc0007e93e04e9e81f9534b160acfa93272165e","first_seen":"2026-08-10T18:17:41.048032Z","last_seen":"2026-08-28T20:20:52.706714Z","times_seen":20,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/platform/dev/favicon.ico?2.0.1786092215591","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:32.525Z","timestamp":1787927492525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1786092215591 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Mon, 04 May 2026 08:11:32 GMT\r\netag: \"69f854b4-423e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":17400,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"e7acdd66f1c9410064321166d3c488b6","sha1":"811bc71a2cf02d52c961e7fee2a6447f9ffff533","sha256":"c18fc4d48165d593e9d3acdad7e335c0a738064b97c6e0003af8f53d2c1fa879","sha512":"d85ebcfa4918b81fba011a793240ad0d9bb0de7b34b0db5bf608814790747a38d489e6c7eb779d84e262761ca976697dea0b4e57bcb67dfee632d14a0c0c0420","ssdeep":"48:JmAOOrSRqtvXJ/1hi3O+v8NntKCopuujF6cDqAUARn724HhoDoWSBcH8iLjrpfvC:JDOojhXW00pecJdSyTilvX5iE2/cefm4","tlshash":"f872f487f984d070a70105ec8061b2abf83c1e9bdb6b162755ad7fcea6fec51130b598","first_seen":"2026-08-10T18:17:41.084015Z","last_seen":"2026-08-28T20:20:52.673538Z","times_seen":16,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/getCoinList","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.821Z","timestamp":1787927491821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":498,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":27,"connect":254,"send":0,"wait":242,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025sc2af162a786f4f15af82ea728b858553.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.265Z","timestamp":1787927493265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sc2af162a786f4f15af82ea728b858553.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 3668\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC7C390C33935D0C859\r\nAccept-Ranges: bytes\r\nETag: \"FA89A2CEA985AC0475E0356A02A2A5D2-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 10484738173944458253\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3668,"size_decoded":4183,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a60a6e1b1774ab016edf208b254728e8","sha1":"4c81170331bc0f984c0100cf38abb2ec456ad89c","sha256":"d93d2738cf78a7056dae68db2bd09605792b34f49836ec418cccad8c86ea76ea","sha512":"3f55f94b9f743166f9167da71bff63153a257210a502125a6315654443f3046cf9f9e03b87b1cc51951baf540d4151aad42e37b56ad1e78933db693bda13f1ed","ssdeep":"","tlshash":"ec717dfdb1a8aa0cd45563379a7fc1819ca57f9e0c6ec96fb81e87e117ac00d10e0a59","first_seen":"2026-02-01T01:46:44.947233Z","last_seen":"2026-08-28T20:20:52.670602Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2198,"timings":{"blocked":1926,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/type/defi_activity_type","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.286Z","timestamp":1787927493286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":508,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/charting_library/charting_library.min.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:29.965Z","timestamp":1787927489965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1a-2a6b\"\r\nexpires: Sat, 29 Aug 2026 02:31:30 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":3705,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-08-28T20:21:12.205695Z","times_seen":1382,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/currencyItem-1535373b.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.835Z","timestamp":1787927491835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/currencyItem-1535373b.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a759ab8-4c4\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1220,"size_decoded":1129,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1219)","md5":"86feb0e6bd1f6e400357181a9ff6271f","sha1":"c0cc13e3415c090c335f211bca93a03111b96dcb","sha256":"1cad1a74d290b500d993d67f1379364d54e7a6c6f562c9f05fa9676cfccf561e","sha512":"88df931100b01764c882311632c6654dae2e9210980861602da33213848f7066d7152ef9355adc5a1f91962443b99ccf64e45461c0349a51cd9e18cd85798b18","ssdeep":"","tlshash":"5121dfae9510c271f3ba8046c47c0419076dbfca700196c4bafe1d593b02ab8d72cb32","first_seen":"2026-08-10T18:17:41.042844Z","last_seen":"2026-08-28T20:20:52.703119Z","times_seen":16,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025sf224f79f17d94df9b537ea4ceacc1ab6.jpg?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:42.817Z","timestamp":1787927502817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025sf224f79f17d94df9b537ea4ceacc1ab6.jpg?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 73010\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BCEAB673233383AF510\r\nAccept-Ranges: bytes\r\nETag: \"9999F4513694CDE4C2715C78DAC8BE71-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 7068336997637021907\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":73010,"size_decoded":73526,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x750, components 3","md5":"1f69aec77db1791501f074b089205dde","sha1":"daa66c9c56f16af579c91b7530e0c9cb5f66b936","sha256":"699745e9847e00e42e9a859ac77239df5b5a92a30dfa22a4d5cc2d4cf0018581","sha512":"6c77f53e85126119393d7f98ba551e910b530fd8c7905b2aca80bf9e00eaf5a8a0eb19a7e8f8ec72810e5b52b1de002fb4a80f4b8639dfaedabd7105b8a4c456","ssdeep":"1536:zd3zHnU1dDMnnJ7VadETEFrhw9yF97zojTaZi3Ld5RVcNY4wSs:zRznSDMqdduyF9Ij2UbPR+wSs","tlshash":"76631266cfb17c69b98afa7466f2b64245406ec4b4c9734e306377c6ab96fc778010c1","first_seen":"2026-08-10T18:17:41.041886Z","last_seen":"2026-08-28T20:20:52.662894Z","times_seen":16,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-3bb9c68f.js","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.824Z","timestamp":1787927491824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-3bb9c68f.js HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 507\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\netag: \"6a759ab8-1fb\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":507,"size_decoded":1026,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (506)","md5":"5a4230bce27a0a98973d7ad9097fbfd3","sha1":"8c2552be9add81b07de2bb9cf32e6a89e425ac35","sha256":"eea5de31eb3a1a2794283552ce5684aaa25498e546fe5d94a09cd1656170f8ad","sha512":"dea4143654f6e2a7f06abded0f458c41ad3cb1085aaf56d95cddf9ab147895d22d22912b40a62cb90564b10476898668be4eff1ac016e86629c1ea1e035ac546","ssdeep":"","tlshash":"13f0c9afac2a852133930ca8a4270922620c2a4573a8d1e8c16a1b2183718d2d24f72a","first_seen":"2026-08-10T18:17:41.08119Z","last_seen":"2026-08-28T20:20:52.705973Z","times_seen":16,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/ethereum.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.242Z","timestamp":1787927493242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ethereum.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 9807\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6AB4B813830CA0319\r\nAccept-Ranges: bytes\r\nETag: \"4449925372601C27C9738AC0B4E5C902-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:02 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 9445008190181339835\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9807,"size_decoded":10321,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-28T22:30:35.373755Z","times_seen":878,"resource_available":false,"data":null}},"time_used":1596,"timings":{"blocked":1317,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/tron.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.247Z","timestamp":1787927493247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/tron.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC67CD23C35370DCC1F\r\nAccept-Ranges: bytes\r\nETag: \"FB0605E690DEC98F2DF25DF64005EC40-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":28787,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-28T22:30:35.468326Z","times_seen":769,"resource_available":false,"data":null}},"time_used":1655,"timings":{"blocked":1351,"dns":0,"connect":0,"send":0,"wait":292,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/echo2025s45bdca21b1334f569a8082493ccc6a3a.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.266Z","timestamp":1787927493266,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2025s45bdca21b1334f569a8082493ccc6a3a.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:35 GMT\r\nContent-Type: image/png\r\nContent-Length: 7514\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC77CD23C353730CD1F\r\nAccept-Ranges: bytes\r\nETag: \"13033EA6C58725B72D798E1D1BB9BD1F-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:23:43 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 15527257983622601881\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7514,"size_decoded":8029,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"81d78026d3724b07890b98bec4cc06fb","sha1":"58f8311e23f02b4e2af8c547cc7d3df9959d125c","sha256":"ed77ffbe2e7519bd091021725155ec2d03fdc780dec3f220acbf647720106c49","sha512":"2e82f036189d4e1763a0365f5eed4597b80ec73219b92568ac2bcdeddfa8608edc76193a829335ba525506d7accf0d1f6b08432dbaad4aa1406e42f8c5a742ed","ssdeep":"96:t7AxPstkZIys03+LO9Qp/l32WE6FsBpSaJzZtqGeluuwRJmWn5ycUgJ7KnGup:gkKIysIqRl3ZFS0GeluuLo5c0KGq","tlshash":"4ef1afee26888bdb48d5d988a9c627eac07e32154ea51fc9e41350d698901cc35dc7d9","first_seen":"2026-02-01T01:46:44.959485Z","last_seen":"2026-08-28T20:20:52.700386Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2229,"timings":{"blocked":1943,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.282Z","timestamp":1787927493282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":508,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.xygjh.com/ws/dce855a5-23e8-4ac2-ac3f-2117e856c11f","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.850Z","timestamp":1787927491850,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"GET /ws/dce855a5-23e8-4ac2-ac3f-2117e856c11f HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://xygjh.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IaeneM18azDPMIcdHOLJGQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Fri, 28 Aug 2026 14:31:33 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://xygjh.com\r\nAccess-Control-Expose-Headers: *\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: pq/FjwrUgtx7jQ5BFrUSBKh8a2I=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":473,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T19:22:55.695476Z","times_seen":18171626,"resource_available":true,"data":null}},"time_used":2187,"timings":{"blocked":0,"dns":729,"connect":970,"send":0,"wait":242,"receive":0,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/getCoinList","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.813Z","timestamp":1787927491813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:32 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10734,"size_decoded":1987,"mime_type":"application/json","magic":"JSON text data","md5":"b9494319914e670c33f44dd1153558b0","sha1":"d9d152e7a9c7bff7d9672fb2cc6304f71addae54","sha256":"40c248b6ebda21d2d11fac386e30f3796b99d885f8c20aa52b2a1774a4ad5bb0","sha512":"29e1fc0396c420736416aa9a711c788d66928d5eb46544163a90fc951b0e74c002ae654b5b73f70e9d7702fadbb16106686e9a64d72da4309f7fd0c2e235bdbd","ssdeep":"192:VXCPX3rXkJcXJlcXt4XT+0XNdX8GXCGMOp/7xLvV77ZQwdSvYf5gu7CKEwY/njZj:nDT","tlshash":"4722fe56622861fdc5b090d01e7b391362c8359fedca8e1ac7de8c9c4ed5ef29606f06","first_seen":"2026-08-28T14:32:10.247279Z","last_seen":"2026-08-28T14:32:10.722436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/assets/index-d253bac1.css","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:31.826Z","timestamp":1787927491826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Fri, 07 Aug 2026 08:43:36 GMT\r\netag: \"6a759ab8-3d\"\r\nexpires: Sat, 29 Aug 2026 02:31:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":564,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-08-28T20:21:12.161689Z","times_seen":451,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xygjh.com/resource/svg/light/zu29.svg?2.0.1786092215591","fqdn":"xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.229Z","timestamp":1787927493229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:23:18 GMT","end":"Wed, 18 Nov 2026 11:23:17 GMT"},"fingerprint":{"sha1":"EA:74:41:92:CB:81:81:0E:FF:93:EC:D7:7A:A9:FC:08:EA:32:1D:94","sha256":"DA:0A:A3:0A:15:22:AB:5B:4A:08:0F:43:24:C0:15:57:40:4D:8F:E7:1C:EE:CD:48:36:F3:67:7D:4C:43:F5:19"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1786092215591 HTTP/1.1\r\nHost: xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Wed, 01 Nov 2023 13:05:32 GMT\r\netag: \"65424d1c-348\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-08-28T20:20:52.709365Z","times_seen":972,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/oil.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.234Z","timestamp":1787927493234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/oil.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 15895\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6C78BAF3338E5827A\r\nAccept-Ranges: bytes\r\nETag: \"097093C67A7870FEA769E72E7E126665-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:03 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 9607164978899822702\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15895,"size_decoded":16411,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"264d64252fc8e5e8ea14e152616ccb01","sha1":"65f6403e3da2efbf72c52cd26135ed8d59f1538a","sha256":"0e920ec3a3370c179f0592f63b2f5ad47e232df149b3a3f3329184f3f7b3f041","sha512":"619171adf0bcbd2a8bc3a357baa9fb65ed04dada353afad09369f780a7f792204a925104b75b78cd0ca3c98a54a5d4a94095b4ca8b35f439cc25abadd0bb3c01","ssdeep":"384:rSKhooEmeRgvZcRo3vYhbZU95yng/17dBG6n/p2BqWWfT8G:rCbmeQ3whVU95yo7fG6n/p2UN","tlshash":"ad62bf36ed43f98efc7c1c7b9146888e98a002588f52630f5a0e496f945fcb1ad7c516","first_seen":"2026-08-10T18:17:41.079185Z","last_seen":"2026-08-28T20:20:52.675766Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1388,"timings":{"blocked":-1,"dns":2,"connect":273,"send":0,"wait":286,"receive":0,"ssl":826},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoss2027.oss-cn-hongkong.aliyuncs.com/waihui/litecoin.png?2.0.1786092215591","fqdn":"echoss2027.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.193","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.246Z","timestamp":1787927493246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/litecoin.png?2.0.1786092215591 HTTP/1.1\r\nHost: echoss2027.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 28 Aug 2026 14:31:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 6A919BC6C78BAF33388F837A\r\nAccept-Ranges: bytes\r\nETag: \"B0A5758F8205EC343A0C4E2D59E2E796-1\"\r\nLast-Modified: Fri, 28 Aug 2026 10:24:02 GMT\r\nx-oss-object-type: Multipart\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":35373,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-28T22:30:35.375192Z","times_seen":942,"resource_available":false,"data":null}},"time_used":1630,"timings":{"blocked":1339,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xygjh.com/api/common/getAllSetting","fqdn":"webapi.xygjh.com","domain":"xygjh.com","tld":"com"},"ip":{"addr":"202.79.166.64","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xygjh.com/","date":"2026-08-28T14:31:33.269Z","timestamp":1787927493269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.xygjb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 11:21:38 GMT","end":"Wed, 18 Nov 2026 11:21:37 GMT"},"fingerprint":{"sha1":"7D:E7:E3:F8:2A:53:BB:C0:77:F6:01:51:35:98:38:83:68:2C:42:CE","sha256":"E2:E2:35:29:24:0A:06:8E:26:DA:FF:AD:69:AC:01:37:6D:D7:C7:26:EA:3E:E9:E9:4E:0F:4A:AB:19:EA:D4:F5"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xygjh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://xygjh.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 28 Aug 2026 14:31:33 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xygjh.com\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11505,"size_decoded":3650,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11173), with no line terminators","md5":"e58319721322a470cde1796cb7563a7a","sha1":"0f99f9b48984375ce5f3da8232dd185ca6072446","sha256":"9759cce6240be04358984b8d9b977c08c5b77bcc1a68bb6e0ef6a84921ceaf07","sha512":"e6e24462ff189e5b9608eb095283f123f612ba21db2df57e1109a37fea1e6876baa02e706061251bc6c9e0ae7616ebe1fabb4222357b813ab7b0bd3ee10dcecf","ssdeep":"192:kIj5HMOFpj4KYS+Rb3uc2i1VBK8FTWei9WQHXA9vKVax1Wv5QX2svS5fMf4Gn2WA:AuGjD8FVHoigx1f2rRMAMDZDryKem2gQ","tlshash":"5f32654f31d8ccfd83d619c5d0ab394eb59c386bd980dc45f8a3ee5c989a9b3880b019","first_seen":"2026-08-28T14:00:31.586145Z","last_seen":"2026-08-28T20:20:52.671703Z","times_seen":14,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"webapi.xygjh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}