{"report_id":"6116cccf-20ab-43bc-83ee-f5c95d6525b4","version":0,"status":"done","tags":[],"date":"2026-10-15T01:28:48Z","url":{"schema":"http","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"title":"Gmail","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-10-15T04:34:21.958553Z","times_seen":1058842,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-19T01:28:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"uidsync.net","ip":{"addr":"178.63.248.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-07-23","domain_rank":36249,"first_seen":"2021-07-23T21:20:22Z","last_seen":"2026-10-08T11:14:30.933066Z","alert_count":0,"request_count":2,"received_data":1713,"sent_data":1144,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"tk.mowell.tech","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-07-28","domain_rank":0,"first_seen":"2026-03-12T23:01:53.595189Z","last_seen":"2026-10-11T12:41:23.506529Z","alert_count":0,"request_count":8,"received_data":0,"sent_data":3848,"comment":"","tags":null,"fingerprints":null},{"fqdn":"szlxskj.com","ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"domain_registered":"2025-12-24","domain_rank":0,"first_seen":"2026-10-15T00:42:29.185029Z","last_seen":"2026-10-15T00:42:29.185029Z","alert_count":8,"request_count":8,"received_data":254029,"sent_data":4132,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"ipwho.is","ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-10-14T11:11:42.181297Z","alert_count":0,"request_count":1,"received_data":399,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d394a8e847f123120d3b3e27c0543b7","sha1":"c56a563eb2719e02500aab4049ca1769fb6992cd","sha256":"ac0321cdba9def4a932e75423cc8d33aee942b0a9de34dd2f8a07bc7f5a9c5b9","sha512":"6ced773a56c4d94d0ab4becc37c92abac9027f2c4a7c4fd3de77716858c7527fdd48ff48f1b0b42144ecc1307ac88f4844f897bdd650fabac18df38c2f536b8d","ssdeep":"","tlshash":"a701f41e2353b2391177328aab1bc10828319093a240c09cb68c576a8f75f6ee6df689","size":725,"data":"","first_seen":"2026-10-12T06:00:51.795663Z","last_seen":"2026-10-15T01:32:54.162736Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"020879911b2a706236a1007a6259e9a9","sha1":"420ed14d002dd6e98b80b265e5b680292a748345","sha256":"91b2bca94651fef92550828e0dffcd1f16e8bfb5d37fb25f53a4f96181e525b0","sha512":"add803820742eda04996d2367c391cfef8864446c7ca26f738e650fdba0353ed9eee65ccf71a35aff5040eabcba6795efaea41353fc914c3e847cc242f39f791","ssdeep":"","tlshash":"7de03026b063badb02b23059b3635725f7d33317586ae874450b45ec3e66c066aeb081","size":426,"data":"","first_seen":"2026-10-12T06:00:51.796981Z","last_seen":"2026-10-15T01:32:54.16339Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eac06d13aa20b8e88e58e67eb40cd574","sha1":"aa09db216ff34f96d925403e85a073ab9cf929c5","sha256":"1bcce964bbaebea8a05f8c0bdac084a5952f507370ef33230920ea05781c2a8e","sha512":"c7d76f4a55c4ea72c57a393113c018568a0bf5598025f5f540a96dbd6fd647d5d367c4ac78585e4c844400f992a18f90ae60cf7d33df1780ac2fd0c8b5173841","ssdeep":"","tlshash":"bc315453527500748233e19f47dbe94c75331007a229d8c87abd8f551f94c3426f9afa","size":1580,"data":"","first_seen":"2026-10-12T06:00:51.798954Z","last_seen":"2026-10-15T01:32:54.164401Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"76d52301eb6517356fca0cd85018f96d","sha1":"1f9921ab5afefe5879df578c748b1df991db0def","sha256":"5f90844b1745692981ff36d61e4231fcd10b50af01ace5f101b8e61d8cdd2fb2","sha512":"0387e799cc4ae8ff8665788ba41cb18f1621c6936bd06860d85e83260f415c979cc747c1e8552529156cc175e0a5b56754db43a36108b77b35170b3438c761ba","ssdeep":"192:+Mhp6FN0/TxhTmiF9M6QEoX5kfRe6RYOChQdrF17Q3AWapa9waBbOlF7kQ+/:+MqgrzTmoMSNR+vgwazI46","tlshash":"f5124299b0fbb5560745003d1bdfb186f27c99032299ca46bebe87607f814a8d273f85","size":9516,"data":"","first_seen":"2026-10-12T06:00:51.800413Z","last_seen":"2026-10-15T01:32:54.165003Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ea25d98b88ed91e6efa39436d7bfefb","sha1":"d0aa39ef793aa8f1125e297bf2a2180d03179a6e","sha256":"a32553ad74cc396d3f21f28b51120fb05e05361f6dbf0966f3e0601777ff7789","sha512":"79d0cc7b7af6034d334334ef932d04179131f9c82ab2e8a1669fe8b7ac25fb021f08abeed840912e68d0909b50110b837126cbbdea01c0e33ae11bd5b8cfba41","ssdeep":"384:IxxzQGu8nJRP1jn5D11a5YzolDY1BX2Q2jlunj:wx0QJRP1jn5zjodwBX2Q2jknj","tlshash":"66b23f56a177013e057340fbc7ef13542335100bb8c6c5697a5ec3442fdaaa6b2afae8","size":25170,"data":"","first_seen":"2026-10-15T00:42:41.190574Z","last_seen":"2026-10-15T01:28:49.508613Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"959ba49d62ea6c6b3cf33f2b488299a0","sha1":"64ed414e7669f29edc5c8392b938359f49845b95","sha256":"be17b2f581cdfe9e8b24c2e598747ff35f65471ca61e5f077318400d358edfd7","sha512":"4ea5f78a4a327d2801e5a84a66a53a285cfd4b9f0b246ceeedc3f748498a21d11fe6bb5c496c95d07024d4ce0d7c7f489f13f10b790099ddb2e972e199f2c512","ssdeep":"48:TSzQR7YWEWYYqRUDvzZEZH1dHnd20R1QpHSHNnpvtpEpTjpNIcA8oddO5qzdYz4/:TSzQmWm8vzM1OKQ1SHNnvCJj3I4SdYPa","tlshash":"ecd1e3e9a8e3d690aeeb2735376ba20365b417c31da1742737cc41a53f8965c8277b40","size":6758,"data":"","first_seen":"2026-10-12T06:00:51.804084Z","last_seen":"2026-10-15T01:32:54.167781Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab669b24c98c9fe6231a5645b933bc72","sha1":"863775d1daf60d482357f45ac21d3bb3b1e71cbb","sha256":"279f1dd283dd61b6b5fa3a485ede98aecf3ffd7d154c950525d53689ae2cb95d","sha512":"e90c7f11d4140e57dfd4d6a74cbe26dcade0cb44cc560f60237319197e1e6b6731041fcc9de40147cc18f8ad42dc9e359a01b508ad305797c035d0311b00ca26","ssdeep":"","tlshash":"4e31028730f310654d6731a8ab87b2a83977016b3200ca407a4c47507fa5b6a7667fee","size":1521,"data":"","first_seen":"2026-10-12T06:00:51.805719Z","last_seen":"2026-10-15T01:32:54.168625Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ebc1492aaffa679266baa7125f0d89d","sha1":"c5bd581cf75261556c717dc984fc36da42e58a6d","sha256":"90a72d7346b96b65690c8c1b7d85aabea57b145a846c97919ec57de275ed5d2a","sha512":"5506ff72adcc84503038d4dd6f5ac65b5dd0c42895a1fab2387a83c587bc3a2a64f17faaac2b0e55b4ebfa9320111c6f15dd85be1440adae03e320b5e8f16a1c","ssdeep":"96:TSdwQPWm8vzM1OKQ1SHNnvCJj3IwlDOCY/VmOldHWWuqO6:WdhuNMAKQ1oRvCJj4wlDCplQWv","tlshash":"24f136e9a5f3d5909ef76634736bb20365b417c31da1642a37cd01a53f8926c82b7b80","size":7553,"data":"","first_seen":"2026-10-12T06:00:51.807151Z","last_seen":"2026-10-15T01:32:54.169397Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/i18n-geo.js","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a0970500dfbef754a7854958d7cbd8a","sha1":"b012caedf6772bce15613358e5be66c29c30039d","sha256":"cbb74583fe3608d22175ad05c5a50731314fc41c366a6b8f114b18376aa510ac","sha512":"ad0f443ba4b129bf8fa4c4aeec824efe5f0526efe54db9862a477e1e0e07ea6e5e5791726c0ba2e324b367ce855137947ac590032da88fb3c1caec21623c9871","ssdeep":"768:t/NskiC1LXtV/XOIsO9/XgnlO557ImwfR1wlfZxM/:tFs+ztV/XOlOhu1mwR16M/","tlshash":"b503d8fa1df631175542d06ab98e4103e634425fad507825bc8f82942f4d3acd2fe7d9","size":38265,"data":"","first_seen":"2026-10-12T06:00:51.762063Z","last_seen":"2026-10-15T01:32:54.121989Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/Gmail_files/sdk.js","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b6a35c355ef6261b641f5082b944669","sha1":"eb9a2e85d1087f4a940a94fdceab3cf2ba47b2bf","sha256":"531bc51f5453a5b9bf0a9876010e358e68c0521eee0be8d2a7cca02824938e9b","sha512":"4942abfe540ee4a5592aaf1f0434657df31433038ff080a2ef951b8e487374aca00770d84bc6676ec40a8766b4e3b7c3fcdbc9b75b70e6f4035ab7972d6052a2","ssdeep":"1536:Sw8mMmNHUkcaDwgzTDF/0dLWbxQwJB+DsLY:Sw8u0JruLLY","tlshash":"3f43a1897bca722801a3a078183f40d6ea277c24950eda09d852f7e23d7575aef33d75","size":55433,"data":"","first_seen":"2026-07-06T22:42:18.541587Z","last_seen":"2026-10-15T01:32:54.079656Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uidsync.net/sync?user_id=9TGNe5K53Q2N4H3IS25JBU","fqdn":"uidsync.net","domain":"uidsync.net","tld":"net"},"ip":{"addr":"178.63.248.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.535Z","timestamp":1792027689535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uidsync.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Sat, 03 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A1:D4:F1:F4:D8:CB:38:29:D0:0F:CB:B2:AA:B2:E8:38:AD:3D:CE:6A","sha256":"D3:62:C6:EC:24:C4:F0:E8:FA:BF:FC:5F:F0:EC:27:5C:1B:7D:C4:B1:01:52:88:06:6C:C0:D7:F8:92:64:C7:EF"}}},"request":{"raw":"OPTIONS /sync?user_id=9TGNe5K53Q2N4H3IS25JBU HTTP/1.1\r\nHost: uidsync.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://szlxskj.com/\r\nOrigin: https://szlxskj.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\nserver: Angie\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\naccess-control-allow-origin: https://szlxskj.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":736,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":1,"connect":33,"send":0,"wait":32,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906460776095291904","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.318Z","timestamp":1792027689318,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906460776095291904 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906317674417364736","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.323Z","timestamp":1792027689323,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906317674417364736 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/logo.png","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.340Z","timestamp":1792027689340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /newlp/2/logo.png HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 08:42:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa7b370-470b\"\r\nexpires: Sat, 14 Nov 2026 01:28:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18187,"size_decoded":18542,"mime_type":"image/png","magic":"PNG image data, 250 x 256, 8-bit/color RGBA, non-interlaced","md5":"792b124aac7a8911021d46f76f9f20eb","sha1":"1f4ba09eb4e31debf41031d76c166249f688a4b4","sha256":"83a72a1dd12e793a90b03f7496c9a93cf58a6adf9cea2484fcf5f772bb8f6c07","sha512":"df6286b6b068e5503372cdec7565bd98c812c256559cf6b63b3ea9690bb21a580959d806ca60e953a92c01f6664a2c249be5397d36a9d756c6a9bd84186a051b","ssdeep":"384:7kEf9WfKJl6Od2VLe3oEQsvpzOcHMR/00KmVa+FXtr5VbkfysrADxswdRj0:HWKSO2hivp9MRc0KmVhHVYf4suY","tlshash":"6c82e0d23fcbf67a115b6019d02812bc153278aa9d4c7fde84caea3253ebe244597d60","first_seen":"2026-10-12T06:00:51.674588Z","last_seen":"2026-10-15T01:32:54.142234Z","times_seen":16,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.513Z","timestamp":1792027689513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 03:13:59 GMT","end":"Fri, 01 Jan 2027 04:13:48 GMT"},"fingerprint":{"sha1":"46:BC:B0:8E:13:82:2B:E3:95:D5:6C:D9:38:36:D2:52:2F:5E:51:5D","sha256":"73:21:78:3F:15:06:A3:68:87:56:C2:9C:EC:D2:D4:2D:D7:BB:B7:7B:BC:99:F3:A6:B8:23:27:09:C5:54:9E:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://szlxskj.com/\r\nOrigin: https://szlxskj.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nretry-after: 29577\r\naccess-control-allow-origin: *\r\ncf-cache-status: EXPIRED\r\ncf-ray: a4ab0ba38a53b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":399,"mime_type":"application/json","magic":"JSON text data","md5":"c38e5d490b5119032416cb7a9eb888ed","sha1":"0eb9f0b95da30848a1d75e16d5430f362a8d6668","sha256":"9caa31c86c15af4e5b47206e234b4625d15abeb65c5ca1ff689f0051d703086e","sha512":"1f103c30f98b38e88489c0cbbd9bf7adc64e8cc807401691db27b20fad7f475a9f5d4baa99d1c40203e483d795b3d1fe63fa3aa125f51b09b496b36823a843c1","ssdeep":"","tlshash":"28b012a32214387603002199a1282500219191e2d4c06415f49a40e891c47c420ab206","first_seen":"2026-06-27T19:43:00.88267Z","last_seen":"2026-10-15T01:32:54.080361Z","times_seen":207,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":4,"connect":14,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/favicon.ico","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:10.667Z","timestamp":1792027690667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:10 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"69d4e1e8-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-15T04:15:21.668721Z","times_seen":339141,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906422956646112256","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.320Z","timestamp":1792027689320,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906422956646112256 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906419475851713024","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.325Z","timestamp":1792027689325,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906419475851713024 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906527195307022336","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.326Z","timestamp":1792027689326,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906527195307022336 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/i18n-geo.js","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.328Z","timestamp":1792027689328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /newlp/2/i18n-geo.js HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Sep 2026 08:42:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa7b36f-9579\"\r\nexpires: Thu, 15 Oct 2026 13:28:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38265,"size_decoded":11555,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7a0970500dfbef754a7854958d7cbd8a","sha1":"b012caedf6772bce15613358e5be66c29c30039d","sha256":"cbb74583fe3608d22175ad05c5a50731314fc41c366a6b8f114b18376aa510ac","sha512":"ad0f443ba4b129bf8fa4c4aeec824efe5f0526efe54db9862a477e1e0e07ea6e5e5791726c0ba2e324b367ce855137947ac590032da88fb3c1caec21623c9871","ssdeep":"768:t/NskiC1LXtV/XOIsO9/XgnlO557ImwfR1wlfZxM/:tFs+ztV/XOlOhu1mwR16M/","tlshash":"b503d8fa1df631175542d06ab98e4103e634425fad507825bc8f82942f4d3acd2fe7d9","first_seen":"2026-10-12T06:00:51.762063Z","last_seen":"2026-10-15T01:32:54.121989Z","times_seen":9,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/sdk.js?z=2210311","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.331Z","timestamp":1792027689331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /sdk.js?z=2210311 HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"69d4e1e8-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-15T04:15:21.668721Z","times_seen":339141,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/devices.min.json","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.442Z","timestamp":1792027689442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /newlp/2/devices.min.json HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"69d4e1e8-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-10-15T04:15:21.668721Z","times_seen":339141,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uidsync.net/sync?user_id=9TGNe5K53Q2N4H3IS25JBU","fqdn":"uidsync.net","domain":"uidsync.net","tld":"net"},"ip":{"addr":"178.63.248.57","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.533Z","timestamp":1792027689533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uidsync.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 03 Mar 2026 00:00:00 GMT","end":"Sat, 03 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A1:D4:F1:F4:D8:CB:38:29:D0:0F:CB:B2:AA:B2:E8:38:AD:3D:CE:6A","sha256":"D3:62:C6:EC:24:C4:F0:E8:FA:BF:FC:5F:F0:EC:27:5C:1B:7D:C4:B1:01:52:88:06:6C:C0:D7:F8:92:64:C7:EF"}}},"request":{"raw":"GET /sync?user_id=9TGNe5K53Q2N4H3IS25JBU HTTP/1.1\r\nHost: uidsync.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://szlxskj.com/\r\nContent-Type: application/json\r\nOrigin: https://szlxskj.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Angie\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: https://szlxskj.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\ncache-control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 00:00:00 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64\r\nset-cookie: rauid=9TGNe5K53Q2N4H3IS25JBU; expires=Fri, 15 Oct 2027 01:28:09 GMT; path=/; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"rauid","value":"9TGNe5K53Q2N4H3IS25JBU","quoted":false,"path":"/","expires":"2027-10-15T01:28:09Z","raw_expires":"Fri, 15 Oct 2027 01:28:09 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"rauid=9TGNe5K53Q2N4H3IS25JBU; expires=Fri, 15 Oct 2027 01:28:09 GMT; path=/; secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":62,"size_decoded":977,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"51d1eb9d9f3599d851349ac350b98445","sha1":"1913229c9e07eef0e7255b76966370777fd27194","sha256":"6ec41d4f9a16a7628cbe2bd5c560fc8004a5b522001496f0c3366b0b5bea7bf9","sha512":"f2c665d72e0b3022d42d9fc639a2bb58f6194a3b4b16023b7c899cf1d840ecad47be1e0acc6eae13c9eadf6d79e11ffb8a861b75e4c4492d7270b36659b77199","ssdeep":"","tlshash":"1da002048d5294d4208b3a53ce97a94471681a60a40c5054cbf0e22974497bc46f3138","first_seen":"2026-10-15T01:28:49.499073Z","last_seen":"2026-10-15T01:28:49.499073Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":36,"send":0,"wait":36,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906462601298352384","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.324Z","timestamp":1792027689324,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906462601298352384 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/Gmail_files/google-logo.png","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.338Z","timestamp":1792027689338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /newlp/2/Gmail_files/google-logo.png HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 14 Sep 2026 08:42:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa7b371-ad82\"\r\nexpires: Sat, 14 Nov 2026 01:28:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44418,"size_decoded":43516,"mime_type":"image/png","magic":"PNG image data, 1280 x 433, 8-bit/color RGBA, non-interlaced","md5":"debdc921f554c27a61342f7f68fd3dcb","sha1":"91c098f1d542171d3fb35ea79b547da55d62983f","sha256":"112319de3f01aa8ea4c4d6eb4c41a7e39a1b194cce4a6c7f1ca7b635ebaeae08","sha512":"a5d3ac60c6d6f8e76e1467f70f32772149639652a4c86cdcd1690ac5b73807f5a556d321ba75dae8f560ec528c889864c89fdd7316a4cdb77bc887008bb9dc8c","ssdeep":"768:bvbOr4uydShAAOCcQ1xLoBf4QFa4P1Cf5VfDZwXSHaO4909R73M4FGA3HgNnLEB:bi4FIAAOCV1q2DfbDYS6yz73Mu3HsLG","tlshash":"8113f173d9f3ec04cd9f11bd2e1a03a4e030678d299a467be57b89bcf299104d157693","first_seen":"2026-07-18T07:38:12.538955Z","last_seen":"2026-10-15T01:32:54.117814Z","times_seen":19,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-15T01:28:07.961Z","timestamp":1792027687961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9 HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:08 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 12 Oct 2026 07:51:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6acc918e-173bc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95164,"size_decoded":23761,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"b80714492cda9170d2cec7ed49ecee0a","sha1":"648e6080e0e1874bbcb7cc96aca46eb7ca78e4b0","sha256":"7a2d19bdeffbab89b6c85647c0f36a878ca49a641f00b4e9b5bced0031b5b87f","sha512":"6165128cfbbdadce10122d1e8f10c19c2923ce6b1896513771801d6f1a7d7c672542b064278f868d2d571caddc5a0188d2f9a7032c931979fdc709d2e227ec1a","ssdeep":"1536:qOG9h2IUqKU+ftATOysNNfl6TJOSxHCJZlPx0QJRP1jn53odwBX2Q2jknUzfD:ah2IUqKU+O6y+VOsvPxbRP1jRB+r","tlshash":"2993f9daa17310262ab341f927eba30a32745103e852d5197fdd83642fc59ede1b7bc8","first_seen":"2026-10-15T00:42:41.161132Z","last_seen":"2026-10-15T01:28:49.501884Z","times_seen":2,"resource_available":true,"data":null}},"time_used":980,"timings":{"blocked":-1,"dns":612,"connect":91,"send":0,"wait":181,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"szlxskj.com/newlp/2/Gmail_files/sdk.js","fqdn":"szlxskj.com","domain":"szlxskj.com","tld":"com"},"ip":{"addr":"170.106.8.35","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.316Z","timestamp":1792027689316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.szlxskj.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 12 Oct 2026 05:47:20 GMT","end":"Sun, 10 Jan 2027 05:47:19 GMT"},"fingerprint":{"sha1":"CA:81:22:E9:A8:03:DB:52:23:E2:25:70:1A:6C:BD:D8:E9:23:66:AB","sha256":"F4:C5:7D:C5:25:D9:DF:12:AA:EE:7D:3A:FA:0C:70:E8:5B:2E:93:EC:1F:7A:72:B7:FC:E8:23:A0:52:4C:23:2F"}}},"request":{"raw":"GET /newlp/2/Gmail_files/sdk.js HTTP/1.1\r\nHost: szlxskj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 15 Oct 2026 01:28:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Sep 2026 08:42:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa7b372-d889\"\r\nexpires: Thu, 15 Oct 2026 13:28:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55433,"size_decoded":15985,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55366), with no line terminators","md5":"8b6a35c355ef6261b641f5082b944669","sha1":"eb9a2e85d1087f4a940a94fdceab3cf2ba47b2bf","sha256":"531bc51f5453a5b9bf0a9876010e358e68c0521eee0be8d2a7cca02824938e9b","sha512":"4942abfe540ee4a5592aaf1f0434657df31433038ff080a2ef951b8e487374aca00770d84bc6676ec40a8766b4e3b7c3fcdbc9b75b70e6f4035ab7972d6052a2","ssdeep":"1536:Sw8mMmNHUkcaDwgzTDF/0dLWbxQwJB+DsLY:Sw8u0JruLLY","tlshash":"3f43a1897bca722801a3a078183f40d6ea277c24950eda09d852f7e23d7575aef33d75","first_seen":"2026-07-06T22:42:18.541587Z","last_seen":"2026-10-15T01:32:54.079656Z","times_seen":186,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"szlxskj.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906317932387667968","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.321Z","timestamp":1792027689321,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906317932387667968 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tk.mowell.tech/ad/events.js?pixel_id=906419475851713024","fqdn":"tk.mowell.tech","domain":"mowell.tech","tld":"tech"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://szlxskj.com/newlp/2/xkmd13.html?lptoken=175f91a098c6887f05f9","date":"2026-10-15T01:28:09.430Z","timestamp":1792027689430,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /ad/events.js?pixel_id=906419475851713024 HTTP/1.1\r\nHost: tk.mowell.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://szlxskj.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}