{"report_id":"62b2acba-ce76-4113-af7c-03e355126927","version":0,"status":"done","tags":[],"date":"2026-10-11T00:08:14Z","url":{"schema":"http","addr":"6hu.xyz/","fqdn":"6hu.xyz","domain":"6hu.xyz","tld":"xyz"},"ip":{"addr":"81.71.140.101","port":0,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","fqdn":"www.zheguankj.com","domain":"zheguankj.com","tld":"com"},"title":"安全验证","dom":{"size":18723,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"981901c4467f0fff50236161fdccbd56","sha1":"e32854128f1fa93e224c936798b6a4c4f31339a6","sha256":"805c9e910ea760ed8bf650479f7fe69c09fa30e765d363701f0def2fed7c352b","sha512":"6bfd5c92fba451c7809abc7b2dd2764aceeb056fd5f82736040f430865c41a857fc48e671e2bece517e5015e1048c5edd3d818c188ea0602da6a82794f50a74e","ssdeep":"384:RuyFvAUX6dAt3f4FtaNiCyzFpcABycMdBOj4Why:rFvAUOAt3f4OUzFFytOj4gy","tlshash":"008218a675e21474e3d308bc2e6f5349b5758a079c59c251fc6ea4908fd0f028babbf4","dom_hash":"domhashcab7338e95eb84afbdb457722649d448","first_seen":"2026-10-11T00:08:40.959462Z","last_seen":"2026-10-11T00:08:40.959462Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"6hu.xyz/","fqdn":"6hu.xyz","domain":"6hu.xyz","tld":"xyz"},"ip":{"addr":"81.71.140.101","port":0,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T00:08:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.grand-field.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.51yueqi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"6hu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.bps-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"wd.jumeiyou.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"wd.jumeiyou.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"wd.loisyassat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"gqj.yenivaziyet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.tehnotrade-ua.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.senang2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"tvy02.grand-field.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":0,"sent_data":1023,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tvy02.51yueqi.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tvy02.bps-tw.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.zheguankj.com","ip":{"addr":"39.108.29.144","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":21168,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"wd.jumeiyou.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":0,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"8.217.84.13","ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":15,"received_data":878318,"sent_data":7606,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"jsyuan.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2365,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"jump.7ee7e.xyz","ip":{"addr":"104.21.62.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":857,"sent_data":623,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tvy02.tehnotrade-ua.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wd.loisyassat.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"16688.lat","ip":{"addr":"172.67.147.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2637,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"6hu.xyz","ip":{"addr":"81.71.140.101","port":80,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2022-07-11","domain_rank":0,"first_seen":"2019-07-22T06:16:13Z","last_seen":"2026-05-02T23:34:39.73704Z","alert_count":2,"request_count":2,"received_data":129,"sent_data":868,"comment":"","tags":null,"fingerprints":null},{"fqdn":"16688.lol","ip":{"addr":"103.199.103.204","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"domain_registered":"2026-09-15","domain_rank":0,"first_seen":"2026-09-27T05:26:04.25648Z","last_seen":"2026-09-27T05:26:07.505827Z","alert_count":0,"request_count":1,"received_data":2434,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gqj.yenivaziyet.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tvy02.senang2.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"16688.lol/e/config.js?_=1791676943282","fqdn":"16688.lol","domain":"16688.lol","tld":"lol"},"ip":{"addr":"103.199.103.204","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"792b4739ddb665727c05d2a073aad1dc","sha1":"c57687deefca3c5d39b7ce412bfaf9f82a10a793","sha256":"44959069daf36daada1422a1bc690805ddf577b2041ae78fa85055b28b43e668","sha512":"9e31373114aaec0e9726befb17eaaf651e96a061d36171ad5aecdfc1bb8276798a5aab2e669798a48978be6f68e2ceff8faa2fbd94b9d52e878d44e11565565f","ssdeep":"","tlshash":"373155638316147d79e100a03aaf7b553f311a2954566615877cec552c7df83082abcd","size":1778,"data":"","first_seen":"2026-10-11T00:08:41.007243Z","last_seen":"2026-10-11T00:08:41.007243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/_e8m3.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4818afa5df14bd3ad405cb319cf37dba","sha1":"ebbd40052382da3740e079fe0ce47e8a8ca163eb","sha256":"b094d0861a55061dd8f64550bbb8945c24c0c63bb52717291a2b3f8996c64302","sha512":"419772c4c67b5d592f7b3a5bea719c4e328bbfef88cdbe12b3c567af116976f4f52df994ea30dbbbb0ff688cb2d53bfe556ca4d23c904feb2c113646baa673c3","ssdeep":"","tlshash":"e7a022ebb8300a3800200f383e3a338038338028000a2a00c22b38802300e8222203f0","size":67,"data":"","first_seen":"2026-10-11T00:08:41.059231Z","last_seen":"2026-10-11T00:08:41.059231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5e04a82ae915fcae3355dbf1e5f2900","sha1":"5d30e5a0e1b088f0e40a2083d90141e6a6d6f9b7","sha256":"b6056e7b1a4042b6b7e421b216828325a3f84fa1bac7f8b7073be4637cc27b53","sha512":"24ca1831d433c559f0635bcee3fc1d17925d84d55df1ccf8040d2faa25a539f84b48033825be8f8ee5f4581ce916324fd3db700d949441d9d9ad5875ebd4a4a2","ssdeep":"","tlshash":"d5017bb984d510376c6368af399f8b887b3700065181e451d45ce6959e70d93933edd5","size":690,"data":"","first_seen":"2026-10-11T00:08:41.068668Z","last_seen":"2026-10-11T00:08:41.068668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"2620e7303521ba41521ed75250511efd","sha1":"b486c9a85248a17ce46564fbfb8db63af1c528fc","sha256":"177def7291d781e1bf057b492ae1a7182bd89c9ab19ee32dcf6530be36b71176","sha512":"74b66d08f42e0a0e1060f2cd33354be9e8765a9da9e4202d42c593ff179583363d226d5c9fb564a8f1294f3a3e5155d9040b7c58a6d7d18f5a150d47ccfab70b","ssdeep":"","tlshash":"ba31ceae71c63a719193713e8aafa219327785031089d658be6da9027f708381373acd","size":1461,"data":"","first_seen":"2026-10-11T00:08:41.070572Z","last_seen":"2026-10-11T00:08:41.070572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/index-xBnSFVZg.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e455fee3c9f49b871829f08588b541d4","sha1":"e248876dd62b05de33ad838d2ffcd75fba3163e0","sha256":"5f6e6f65a288c811a727578bd69d1cd10fb35de35c970499fe14bfd561dae2d5","sha512":"7330d57a1ecf5536dd1364608a36c92a0a44b9e73e14d55eef73c205d9e37fb74b71a2999fe5464003b68af59030165b380859cf222d84ef4e753e2ef72728a2","ssdeep":"3072:Gc00ctgNptxYYprDCU2QaX6r7orD4UoKzqbPUCzllPgpjPoqqp:GqDtx7t0a0YUsopPoqw","tlshash":"fe3428e87586b47943bb48e910bb0006b33d1994744dc8a4f16eecea3967859c1b7fbc","size":236967,"data":"","first_seen":"2026-10-11T00:08:40.98298Z","last_seen":"2026-10-11T00:08:40.98298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","fqdn":"www.zheguankj.com","domain":"zheguankj.com","tld":"com"},"ip":{"addr":"39.108.29.144","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ca049c748178599130dd20230640fde","sha1":"8477b78e6eb7268d8729349e6a415bb3e2bea3ad","sha256":"df690a35d4759f7ea15432e2a71f7c209b4a0a0e65d2743a59812c3e67bdc528","sha512":"9c124e2a33d4274cd3ae9b6408c88b071d2745451626e9aeb03c26152dd77713346ebac49ea8b77adc96d9fa99e3bf1c662a1203f82ac0117b9127418646a0a7","ssdeep":"192:7EiVQxryiGbFpIg+ABxevTwKj7gJMx10c/a40E4ageXzNi4budBi1XWnQ4:giCyzFpcABycMdBOj4W9","tlshash":"fa22a49979a30475d3d3087d5ebf120176799a4b5c8cc1a1bc2ea5805fe4f018aaeff8","size":10505,"data":"","first_seen":"2026-10-11T00:08:41.074269Z","last_seen":"2026-10-11T00:08:41.074269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-10-11T00:55:16.445979Z","times_seen":28326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/request-DqYWXYys.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a62d695e17f36c32eaa2417ac0686cd","sha1":"2d7caa58de6202d6098b475f6cba4975f73c543d","sha256":"db5bea040bdcbc49d0a9935fe110bafb5e61fcb75846f5b23f5385cbbdd6909f","sha512":"e2aec5e9d23b0d3a114a11d98495490334f532d3e2d582d12440d28d8587279acb186e5719065d8990cb3551f91d6b60fb3ebce76ba860656632f9173366e739","ssdeep":"","tlshash":"db41584fb9b727a333a12eecd0e71926922c335f3119c4e47176861a2e319454755c9b","size":2206,"data":"","first_seen":"2026-10-11T00:08:40.962024Z","last_seen":"2026-10-11T00:08:40.962024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/Verify-BrOk14m4.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"73f97c53f57af1770c37057b5c06654e","sha1":"781a1685b338b59087f98545283b5ddc5cd80423","sha256":"a1d5d8ad435f80f5ec05a72c1c3769f7ca05319dea66dd5d481cde214fc2a570","sha512":"bd9acf7782d3090b8340ad14c6d94c1a68e9caaa5cc9b508e8f659d5fafd82e4f93051a337b9721c5aeccd992289362ad12809bc8049ddb3e2009ab45395fa8d","ssdeep":"384:1olJDj5nP94NpJVkIiwLCYIxOLFwX+ek1gR69H7mNUD5cys0yL3ugFRL5o6sRQMx:WlJDVnPqNtXLCJOLFvekZzyyPyLegFRQ","tlshash":"59a2f905391ba73dd373549151a4110830a83fcab58648d620fd4bba1beecb9776abbc","size":23018,"data":"","first_seen":"2026-10-11T00:08:41.001754Z","last_seen":"2026-10-11T00:08:41.001754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/index-DhXgJQ-f.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"94c47668a11875922e781fea9cff816d","sha1":"bccc1fc7251258ea4a123d9177eab0d55b68cb48","sha256":"8bbb22f973d459d7a67f3ce2f0324523347a6a077d956da86497ce957576a6a2","sha512":"cedcf55b9f0b453e47db97810dfd5e0c4421509d46ee5a0413d957bc7f5cf1641c908610d3189f44ed3cda63ad4e575bf52bf479f6cf266240c1fd56525d1ab1","ssdeep":"768:5zvPqdCO3T11LQ0m+/06z/Wm4d4SkqnFt/wz8l2um/h1R9VNCEnX+lIE2vtEzV8k:FuhEquH5gzcB71sYBvvNroON","tlshash":"85232be176d2b02643ea65f4406b1402f37d9915b44e84e0f26cdcdb2eb614b86bbf78","size":46088,"data":"","first_seen":"2026-07-03T09:11:10.593307Z","last_seen":"2026-10-11T00:08:40.987067Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/tracker-DKy5C4oD.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cda4157c8ef409e9bf5211cff98cc7b","sha1":"e1041618d0e0657f41063e70b95f56a4a82feac6","sha256":"0b0af71714cc35609818cb43b4afa73b6982c1b9cf76cc9e11d65e3c8d092257","sha512":"8655e29734500ec688456976ac3e4604f42be024638086d9c56564c4095f5b21112483541f603b26a8dc485877575eef0f20afe4fcd23a33d6517500f52ff416","ssdeep":"768:tIG+71GJ3skk1ezzO08Jga34Wtwi+7RB6hJg4tNqJUUogCS0NIIXNDzQeOrWPp:6G+K3WezX8Ki+7RB8J1tNqJUUogehdR","tlshash":"902319e87287b079837314ba447f5107b23a3d64640d8952e427d9c93cb9e6e8237fb9","size":46268,"data":"","first_seen":"2026-09-26T07:20:34.904362Z","last_seen":"2026-10-11T00:08:41.050578Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"6hu.xyz/","fqdn":"6hu.xyz","domain":"6hu.xyz","tld":"xyz"},"ip":{"addr":"81.71.140.101","port":80,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bc2edc28db73f2367483bcb79258e70","sha1":"c62267979d9a503b80e699503778f1bd96fb0086","sha256":"882c004b3cb6eca831a3db83f8c055d38f66a599aed95e5f70e63922ceadf6ff","sha512":"958095173e0dc9e93bd8213be6a739ed123966b27040275081a1488363785637d3018593a5f078811b749e7052c64f0941d8d75a707062b5357b0cd60ce1f3be","ssdeep":"","tlshash":"bcf002bb118115b448fe501ab317374fbaef43c31c9d3004c00508002619f4e853bbf8","size":609,"data":"","first_seen":"2026-10-11T00:08:41.078009Z","last_seen":"2026-10-11T00:08:41.078009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"16688.lat/e/config.js?_=1791676943282","fqdn":"16688.lat","domain":"16688.lat","tld":"lat"},"ip":{"addr":"172.67.147.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53e57e56068ae5eb13860faae0ebab62","sha1":"7a6be3da2bef30f22b3834c4e245f4502bd4d936","sha256":"2abb9acffab7f9e450e20ded85e0b87012696ad45fc4d2e789f95c57f46d7ced","sha512":"ce477bfd4620b81a0dea2963bf3dff5e89931afdf7e070207dfdcb399f65e0f9f6692f7d56b23a7edceb597d927a5ac5fe45010ebb96480d222d314dd79a2aed","ssdeep":"","tlshash":"733165b3832e51bd35f114a579bf3ba43a311a2d54423619c76db80a2869fc34869bce","size":1778,"data":"","first_seen":"2026-10-11T00:08:41.013636Z","last_seen":"2026-10-11T00:08:41.013636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsyuan.oss-cn-hongkong.aliyuncs.com/s/base.js?_=1791676943281","fqdn":"jsyuan.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9a7b2c89ca8c875d27f6fa876204710","sha1":"cb80639790be5972814d30666e068c754543ec15","sha256":"7bc8ff003a8852e3621ed9b72e127e1d7a6bfb5876658438a7003e4666dab08d","sha512":"c529894be86eaf8a1c48ea73d61975178751ef8d17ea79c9482d2a47835daaa6191803c6a43beef7fa649245c2476a5bde80bc62ee24c3a11913469fd19cd729","ssdeep":"","tlshash":"4c3187675359407d78b200d129af3b553f21163d84563a19877ce80a38aaec34865bcd","size":1778,"data":"","first_seen":"2026-10-11T00:08:40.974786Z","last_seen":"2026-10-11T00:08:40.974786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"8.217.84.13/assets/request-DqYWXYys.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.333Z","timestamp":1791676954333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/request-DqYWXYys.js HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-89e\"\r\nexpires: Tue, 10 Nov 2026 00:02:34 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2206,"size_decoded":1578,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1995)","md5":"0a62d695e17f36c32eaa2417ac0686cd","sha1":"2d7caa58de6202d6098b475f6cba4975f73c543d","sha256":"db5bea040bdcbc49d0a9935fe110bafb5e61fcb75846f5b23f5385cbbdd6909f","sha512":"e2aec5e9d23b0d3a114a11d98495490334f532d3e2d582d12440d28d8587279acb186e5719065d8990cb3551f91d6b60fb3ebce76ba860656632f9173366e739","ssdeep":"","tlshash":"db41584fb9b727a333a12eecd0e71926922c335f3119c4e47176861a2e319454755c9b","first_seen":"2026-10-11T00:08:40.962024Z","last_seen":"2026-10-11T00:08:40.962024Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/uploads/adv/230f937ae7.jpg","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.944Z","timestamp":1791676954944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /uploads/adv/230f937ae7.jpg HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100205\r\nlast-modified: Sat, 10 Oct 2026 15:22:52 GMT\r\netag: \"6aca584c-1876d\"\r\nexpires: Tue, 10 Nov 2026 00:02:35 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100205,"size_decoded":100634,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 602x900, components 3","md5":"9de6a642f437e4627e51d6c6d4114155","sha1":"4cf9aa6e709f06b4bb5c8c9d588d0c7f9dce3666","sha256":"637e641aab2edc313bc2401c0b3613489249b6f8571c768f31d2ca2890ead07e","sha512":"4cea69fffbeaf73027c979b6c4cd68bb6e9b2a6ce753e9c72575ff4677f1502a4180842e162b59ae738966f8d48981efdea15b8c6a95fb99206d5789ec337b34","ssdeep":"3072:N7GtrvrX093b3AwjUvPusYbnkN4DRae/loNqE6A8W+K:ZGtrjX0Jb3AwYPTYbnC40edoNqEl8A","tlshash":"a6a302660282305bfff197ed16396980524824edfa6866bff7f68dcc6744dac3722901","first_seen":"2026-09-27T05:26:15.632682Z","last_seen":"2026-10-11T00:08:40.964232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsyuan.oss-cn-hongkong.aliyuncs.com/s/base.js?_=1791676943281","fqdn":"jsyuan.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.211","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","date":"2026-10-11T00:02:23.286Z","timestamp":1791676943286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /s/base.js?_=1791676943281 HTTP/1.1\r\nHost: jsyuan.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sun, 11 Oct 2026 00:02:24 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 6ACAD210AB67323437E9F50A\r\nLast-Modified: Sun, 04 Oct 2026 03:09:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12973125882560781666\r\nx-oss-storage-class: Standard\r\nCache-Control: max-age=300, public\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uaeyyJyoyHXSf2+odiBHEA==\r\nx-oss-server-time: 2\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1778,"size_decoded":1674,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1778), with no line terminators","md5":"b9a7b2c89ca8c875d27f6fa876204710","sha1":"cb80639790be5972814d30666e068c754543ec15","sha256":"7bc8ff003a8852e3621ed9b72e127e1d7a6bfb5876658438a7003e4666dab08d","sha512":"c529894be86eaf8a1c48ea73d61975178751ef8d17ea79c9482d2a47835daaa6191803c6a43beef7fa649245c2476a5bde80bc62ee24c3a11913469fd19cd729","ssdeep":"","tlshash":"4c3187675359407d78b200d129af3b553f21163d84563a19877ce80a38aaec34865bcd","first_seen":"2026-10-11T00:08:40.974786Z","last_seen":"2026-10-11T00:08:40.974786Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":33,"connect":264,"send":0,"wait":267,"receive":0,"ssl":794},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tvy02.grand-field.com/go/WAeqMA8IZd?_f=1\u0026_relay=www.zheguankj.com\u0026_rf=aHR0cDovLzZodS54eXov","fqdn":"tvy02.grand-field.com","domain":"grand-field.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","date":"2026-10-11T00:02:24.238Z","timestamp":1791676944238,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /go/WAeqMA8IZd?_f=1\u0026_relay=www.zheguankj.com\u0026_rf=aHR0cDovLzZodS54eXov HTTP/1.1\r\nHost: tvy02.grand-field.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.grand-field.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvy02.51yueqi.com/assets/_e8m3.js","fqdn":"tvy02.51yueqi.com","domain":"51yueqi.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{4d6a25b4-079a-44c1-bed2-9fdcba5c8328}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.266Z","timestamp":1791676944266,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: tvy02.51yueqi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.51yueqi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/index-xBnSFVZg.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:32.899Z","timestamp":1791676952899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/index-xBnSFVZg.js HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-39da7\"\r\nexpires: Tue, 10 Nov 2026 00:02:33 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236967,"size_decoded":91372,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23336)","md5":"e455fee3c9f49b871829f08588b541d4","sha1":"e248876dd62b05de33ad838d2ffcd75fba3163e0","sha256":"5f6e6f65a288c811a727578bd69d1cd10fb35de35c970499fe14bfd561dae2d5","sha512":"7330d57a1ecf5536dd1364608a36c92a0a44b9e73e14d55eef73c205d9e37fb74b71a2999fe5464003b68af59030165b380859cf222d84ef4e753e2ef72728a2","ssdeep":"3072:Gc00ctgNptxYYprDCU2QaX6r7orD4UoKzqbPUCzllPgpjPoqqp:GqDtx7t0a0YUsopPoqw","tlshash":"fe3428e87586b47943bb48e910bb0006b33d1994744dc8a4f16eecea3967859c1b7fbc","first_seen":"2026-10-11T00:08:40.98298Z","last_seen":"2026-10-11T00:08:40.98298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/index-DhXgJQ-f.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.335Z","timestamp":1791676954335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/index-DhXgJQ-f.js HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-b408\"\r\nexpires: Tue, 10 Nov 2026 00:02:34 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46088,"size_decoded":18695,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27394)","md5":"94c47668a11875922e781fea9cff816d","sha1":"bccc1fc7251258ea4a123d9177eab0d55b68cb48","sha256":"8bbb22f973d459d7a67f3ce2f0324523347a6a077d956da86497ce957576a6a2","sha512":"cedcf55b9f0b453e47db97810dfd5e0c4421509d46ee5a0413d957bc7f5cf1641c908610d3189f44ed3cda63ad4e575bf52bf479f6cf266240c1fd56525d1ab1","ssdeep":"768:5zvPqdCO3T11LQ0m+/06z/Wm4d4SkqnFt/wz8l2um/h1R9VNCEnX+lIE2vtEzV8k:FuhEquH5gzcB71sYBvvNroON","tlshash":"85232be176d2b02643ea65f4406b1402f37d9915b44e84e0f26cdcdb2eb614b86bbf78","first_seen":"2026-07-03T09:11:10.593307Z","last_seen":"2026-10-11T00:08:40.987067Z","times_seen":18,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/Verify-DIEaem2K.css","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.338Z","timestamp":1791676954338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/Verify-DIEaem2K.css HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-733b\"\r\nexpires: Tue, 10 Nov 2026 00:02:34 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29499,"size_decoded":8898,"mime_type":"text/css","magic":"ASCII text, with very long lines (29498)","md5":"e5a29e4003398732a74597e5162c0724","sha1":"30659e04beaf445dc82bf9b19c0a423634fbb49e","sha256":"43a3fdbc9b706150f9b2fa4003cee9571e10e51628e39b642a94e0a6b5e8c9a0","sha512":"f10890b70ee78e6ce670892684b6cb81d1a4fd5c57ac9b7a38f2a86ab89a1525002db6c54509046e1ae8b868533b30eb76faaa375f21eed74f53105a86094686","ssdeep":"384:yDu2FmzLVfikULjk0UKurdHc0dqztPKPlOZSeJBDu2FmzLVfikULjk0Utr0Jmg2D:KTmz5quxpHUPKkpnTmz5quxZ0TbmF","tlshash":"35d2e920295c203db777c9a664c0d68eb035e793e03b1bac6692f174de9b9e33677241","first_seen":"2026-10-11T00:08:40.99815Z","last_seen":"2026-10-11T00:08:40.99815Z","times_seen":1,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/track","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:35.309Z","timestamp":1791676955309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 1136\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://8.217.84.13\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1136,"data":"{\"visit_id\":\"384521008041705472\",\"dwell_ms\":367,\"event_count\":0,\"scroll_depth\":0,\"switch_bg\":0,\"clicked_cta\":0,\"click_count\":0,\"touch_count\":0,\"mousemove_count\":0,\"first_op_ms\":0,\"first_scroll_ms\":0,\"first_click_ms\":0,\"cta_click_ms\":0,\"action_sequence\":\"\",\"action_intervals\":\"\",\"fingerprint\":\"e3ce53eea6f3724760418e9064ed82ae\",\"screen\":\"1280x1024\",\"network_type\":\"WiFi/移动网络\",\"webdriver\":0,\"local_device_id\":\"rhm8pkbdlg3q0xqw6r0nk0dq\",\"go_seed\":\"mv3276g0zpfad0q6pm\",\"device_signals\":\"{\\\"orient\\\":\\\"landscape-primary\\\",\\\"vw\\\":1280,\\\"vh\\\":1024,\\\"cgam\\\":\\\"s\\\",\\\"hdr\\\":0,\\\"rdm\\\":0,\\\"dark\\\":0,\\\"perf\\\":[1798,1812,0]}\",\"platform\":\"Linux x86_64\",\"user_agent_data\":\"\",\"webgl_vendor\":\"Mesa\",\"webgl_renderer\":\"llvmpipe, or similar\",\"webgl_extensions\":\"bcfcd2b8d8b9d000\",\"webgl_max_tex\":16384,\"webgl_params\":\"485a6e8477784400\",\"audio_fp\":\"bff93b424b661000\",\"fonts_hash\":\"524545258dc10800\",\"color_depth\":24,\"dpr\":\"1\",\"hardware_concurrency\":8,\"device_memory\":\"\",\"max_touch_points\":0,\"language\":\"en-US\",\"languages\":\"en-US,en\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"screen_width\":1280,\"screen_height\":1024,\"avail_width\":1280,\"avail_height\":1024}"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":340,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-10-11T02:13:09.568491Z","times_seen":24114,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"6hu.xyz/","fqdn":"6hu.xyz","domain":"6hu.xyz","tld":"xyz"},"ip":{"addr":"81.71.140.101","port":80,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:02:19.447Z","timestamp":1791676939447,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 6hu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=86400\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 718\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"6hu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvy02.grand-field.com/assets/_e8m3.js","fqdn":"tvy02.grand-field.com","domain":"grand-field.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{4d99521d-4deb-44f2-a061-1d2e44c73de1}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.261Z","timestamp":1791676944261,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: tvy02.grand-field.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.grand-field.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/Verify-BrOk14m4.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.329Z","timestamp":1791676954329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/Verify-BrOk14m4.js HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-59ea\"\r\nexpires: Tue, 10 Nov 2026 00:02:34 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":23018,"size_decoded":9253,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22216)","md5":"73f97c53f57af1770c37057b5c06654e","sha1":"781a1685b338b59087f98545283b5ddc5cd80423","sha256":"a1d5d8ad435f80f5ec05a72c1c3769f7ca05319dea66dd5d481cde214fc2a570","sha512":"bd9acf7782d3090b8340ad14c6d94c1a68e9caaa5cc9b508e8f659d5fafd82e4f93051a337b9721c5aeccd992289362ad12809bc8049ddb3e2009ab45395fa8d","ssdeep":"384:1olJDj5nP94NpJVkIiwLCYIxOLFwX+ek1gR69H7mNUD5cys0yL3ugFRL5o6sRQMx:WlJDVnPqNtXLCJOLFvekZzyyPyLegFRQ","tlshash":"59a2f905391ba73dd373549151a4110830a83fcab58648d620fd4bba1beecb9776abbc","first_seen":"2026-10-11T00:08:41.001754Z","last_seen":"2026-10-11T00:08:41.001754Z","times_seen":1,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tvy02.bps-tw.com/assets/_e8m3.js","fqdn":"tvy02.bps-tw.com","domain":"bps-tw.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{573c8b42-b85e-400d-8ea5-fec900680be4}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.285Z","timestamp":1791676944285,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: tvy02.bps-tw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.bps-tw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"16688.lol/e/config.js?_=1791676943282","fqdn":"16688.lol","domain":"16688.lol","tld":"lol"},"ip":{"addr":"103.199.103.204","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","date":"2026-10-11T00:02:23.289Z","timestamp":1791676943289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16688.lol","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 09:24:24 GMT","end":"Tue, 22 Dec 2026 09:24:23 GMT"},"fingerprint":{"sha1":"9E:B6:3D:7F:A3:AA:A8:9D:70:94:7E:F5:21:BC:8F:5E:A9:67:36:6B","sha256":"72:AD:AC:68:55:38:F9:85:47:3A:20:CF:DB:51:45:50:48:A2:F3:71:26:BF:A7:BC:3A:F5:EA:52:83:EC:71:55"}}},"request":{"raw":"GET /e/config.js?_=1791676943282 HTTP/1.1\r\nHost: 16688.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Edge/1.1.31\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 11 Oct 2026 00:02:24 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=60\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nx-cache: MISS\r\nx-cache-key: e919e0b4062b15b9bbd9c93bdaa05281\r\nage: 0\r\nx-request-id: 296669d6a7625cce63f45cc911a4854a\r\nset-cookie: __ct_cya_ckt=ga1.16688.lol.84581248.U258b9Ed.1791676944.i67fxWltx-LTn3dIl2KPdQ; Max-Age=63072000; Domain=16688.lol; Path=/; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__ct_cya_ckt","value":"ga1.16688.lol.84581248.U258b9Ed.1791676944.i67fxWltx-LTn3dIl2KPdQ","quoted":false,"path":"/","domain":"16688.lol","max_age":63072000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__ct_cya_ckt=ga1.16688.lol.84581248.U258b9Ed.1791676944.i67fxWltx-LTn3dIl2KPdQ; Max-Age=63072000; Domain=16688.lol; Path=/; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1778,"size_decoded":1729,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1778), with no line terminators","md5":"792b4739ddb665727c05d2a073aad1dc","sha1":"c57687deefca3c5d39b7ce412bfaf9f82a10a793","sha256":"44959069daf36daada1422a1bc690805ddf577b2041ae78fa85055b28b43e668","sha512":"9e31373114aaec0e9726befb17eaaf651e96a061d36171ad5aecdfc1bb8276798a5aab2e669798a48978be6f68e2ceff8faa2fbd94b9d52e878d44e11565565f","ssdeep":"","tlshash":"373155638316147d79e100a03aaf7b553f311a2954566615877cec552c7df83082abcd","first_seen":"2026-10-11T00:08:41.007243Z","last_seen":"2026-10-11T00:08:41.007243Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1712,"timings":{"blocked":-1,"dns":336,"connect":298,"send":0,"wait":460,"receive":0,"ssl":618},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/index-DSnWBCJ5.css","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:32.901Z","timestamp":1791676952901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/index-DSnWBCJ5.css HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-5b470\"\r\nexpires: Tue, 10 Nov 2026 00:02:33 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373872,"size_decoded":56871,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"7e0cb311acd3840759ee769f04d8abe7","sha1":"d7ae4ec56f4e94f16bb4f284e4ef73a1a985477f","sha256":"f7334535bccec6d3613203cb6ce4e4d415bbe6f5b14e0f697bfa242caa6ae185","sha512":"f7a8224d2754cbc705c9ae8f0ae11c4eecf17ee702539a602b637145e83fafae4d42c48f580564a63776a27b471deab5d5c748311b0b3d3710b76e94bca83109","ssdeep":"6144:p6xbnFSaBMa8R8S9kXQW3KjhfsDpNTTA2lwIuLi+54DcIxW/z7g3WagMXZyfTfuv:PhKXylXoBVJ","tlshash":"4984c555fb23653b2817ea7c6ac4ea995f14df91c92247b6fa40b00891c7de102e3d3e","first_seen":"2026-09-26T07:20:34.9273Z","last_seen":"2026-10-11T00:08:41.010487Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zheguankj.com/favicon.ico","fqdn":"www.zheguankj.com","domain":"zheguankj.com","tld":"com"},"ip":{"addr":"39.108.29.144","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","date":"2026-10-11T00:02:23.613Z","timestamp":1791676943613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.zheguankj.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 15 Jul 2026 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C0:8B:9C:F6:BC:1B:30:7D:27:CA:D9:63:0D:4C:4D:E5:A2:11:73:F2","sha256":"05:77:B1:67:E0:FD:55:44:6F:C2:21:83:09:87:89:93:14:82:85:BF:97:01:75:08:66:88:05:B7:2D:94:6A:8E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.zheguankj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: AliyunOSS\r\nDate: Sun, 11 Oct 2026 00:02:23 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 6ACAD20F0E28CD3238FFAACE\r\nLast-Modified: Wed, 15 Jul 2026 09:12:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1405225700540738857\r\nx-oss-storage-class: Standard\r\nContent-MD5: mkpX7Acc/f8+vKuDXg/2KQ==\r\nx-oss-server-time: 4\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2046,"size_decoded":1513,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"9a4a57ec071cfdff3ebcab835e0ff629","sha1":"9d1fa039c3e664d53d8f693681a79d9b81c4b86f","sha256":"231f10716fb71464e0c156eb00a26e0e2b902c85a8c1e3058ddf7f6b3d38d2bf","sha512":"14db0688e28b5e0ea36a8db65b10e7e66d972b18cbb5edb2a0c26e2e8282fd3bee2dc79b8950337374e366b694dbdc324ff762848dd8fc13bd908cc509f79fa7","ssdeep":"","tlshash":"d14185138b281fcc50ea41824e9173cd9ae26c17df568da0d962157bc5cccf7c69224b","first_seen":"2026-10-11T00:08:41.01189Z","last_seen":"2026-10-11T00:08:41.01189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wd.jumeiyou.com/assets/_e8m3.js","fqdn":"wd.jumeiyou.com","domain":"jumeiyou.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{3ac983d4-b55b-4355-9fea-a4e991c32c35}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.293Z","timestamp":1791676944293,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: wd.jumeiyou.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"wd.jumeiyou.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"wd.jumeiyou.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wd.loisyassat.com/assets/_e8m3.js","fqdn":"wd.loisyassat.com","domain":"loisyassat.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{943b4064-767c-48e4-8731-1878957cea0e}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.295Z","timestamp":1791676944295,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: wd.loisyassat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"wd.loisyassat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"6hu.xyz/","fqdn":"6hu.xyz","domain":"6hu.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:02:16.568Z","timestamp":1791676936568,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 6hu.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"6hu.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"16688.lat/e/config.js?_=1791676943282","fqdn":"16688.lat","domain":"16688.lat","tld":"lat"},"ip":{"addr":"172.67.147.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","date":"2026-10-11T00:02:23.291Z","timestamp":1791676943291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16688.lat","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 17:45:11 GMT","end":"Wed, 16 Dec 2026 17:45:10 GMT"},"fingerprint":{"sha1":"1D:E0:FE:5E:C4:89:E7:8B:9B:AC:5E:14:88:B5:07:11:91:2C:2C:29","sha256":"C8:2E:02:CC:2E:CD:1C:54:6F:65:C4:A2:69:15:0A:5C:BF:CF:5C:BC:82:BA:9D:B6:E4:B2:7B:39:4D:C8:CA:66"}}},"request":{"raw":"GET /e/config.js?_=1791676943282 HTTP/1.1\r\nHost: 16688.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:02:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 11 Oct 2026 00:02:24 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYkwz53sYa4Q29jJ1Po5%2F11rLsATaHgp6oqwOndtNXf4eLjItMp%2F879BMln6lalwUUItyUDnu4paZkr6sNI%2FYlqBB4ArsLUOBF9HszA4IX1zhNKkCjtyfoQaAw0%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a48998805b92b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1778,"size_decoded":1931,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1778), with no line terminators","md5":"53e57e56068ae5eb13860faae0ebab62","sha1":"7a6be3da2bef30f22b3834c4e245f4502bd4d936","sha256":"2abb9acffab7f9e450e20ded85e0b87012696ad45fc4d2e789f95c57f46d7ced","sha512":"ce477bfd4620b81a0dea2963bf3dff5e89931afdf7e070207dfdcb399f65e0f9f6692f7d56b23a7edceb597d927a5ac5fe45010ebb96480d222d314dd79a2aed","ssdeep":"","tlshash":"733165b3832e51bd35f114a579bf3ba43a311a2d54423619c76db80a2869fc34869bce","first_seen":"2026-10-11T00:08:41.013636Z","last_seen":"2026-10-11T00:08:41.013636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":109,"connect":22,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/api/public/advertiser-paths","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.048Z","timestamp":1791676954048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /api/public/advertiser-paths HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":393,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T02:34:43.159639Z","times_seen":567018,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/tracker-DKy5C4oD.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.337Z","timestamp":1791676954337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/tracker-DKy5C4oD.js HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-b4bc\"\r\nexpires: Tue, 10 Nov 2026 00:02:34 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46268,"size_decoded":20226,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22157)","md5":"6cda4157c8ef409e9bf5211cff98cc7b","sha1":"e1041618d0e0657f41063e70b95f56a4a82feac6","sha256":"0b0af71714cc35609818cb43b4afa73b6982c1b9cf76cc9e11d65e3c8d092257","sha512":"8655e29734500ec688456976ac3e4604f42be024638086d9c56564c4095f5b21112483541f603b26a8dc485877575eef0f20afe4fcd23a33d6517500f52ff416","ssdeep":"768:tIG+71GJ3skk1ezzO08Jga34Wtwi+7RB6hJg4tNqJUUogCS0NIIXNDzQeOrWPp:6G+K3WezX8Ki+7RB8J1tNqJUUogehdR","tlshash":"902319e87287b079837314ba447f5107b23a3d64640d8952e427d9c93cb9e6e8237fb9","first_seen":"2026-09-26T07:20:34.904362Z","last_seen":"2026-10-11T00:08:41.050578Z","times_seen":4,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","fqdn":"www.zheguankj.com","domain":"zheguankj.com","tld":"com"},"ip":{"addr":"39.108.29.144","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:02:21.399Z","timestamp":1791676941399,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.zheguankj.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 15 Jul 2026 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C0:8B:9C:F6:BC:1B:30:7D:27:CA:D9:63:0D:4C:4D:E5:A2:11:73:F2","sha256":"05:77:B1:67:E0:FD:55:44:6F:C2:21:83:09:87:89:93:14:82:85:BF:97:01:75:08:66:88:05:B7:2D:94:6A:8E"}}},"request":{"raw":"GET /Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd HTTP/1.1\r\nHost: www.zheguankj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://6hu.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Sun, 11 Oct 2026 00:02:22 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nx-oss-request-id: 6ACAD20E0E28CD32388CA8CE\r\nLast-Modified: Sun, 04 Oct 2026 01:22:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16413245756942340527\r\nx-oss-storage-class: Standard\r\nContent-MD5: lMcy8F8N0AaSLq7lQsHKIQ==\r\nx-oss-server-time: 2\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":18212,"size_decoded":8093,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"c47b01661da15e22e6b2da424ae9cd50","sha1":"c4110f8a154666fd80278a0fde9b8d2081eeac13","sha256":"2427710bd76b53ffba7fead7b5637cf430520c952494b7321f644b0e5a3d035a","sha512":"2aa763bc3d1ccf6324fb99e5162abfc366c95ae4ae4c8091d0267bd822e5cf87efdde309eb096761ec39d81d6d255c94d7d05f8bc76b973d6bdc9baf1ca67bfb","ssdeep":"384:6rFvAUX6dAt3f4FtaNiCyzFpcABycMdBOj4W8:gFvAUOAt3f4OUzFFytOj4d","tlshash":"7b8208a675e21478e3d348bc1e6f5345b5758a078c59c251fc6ea4908fd0f028babbf4","first_seen":"2026-10-11T00:08:41.052999Z","last_seen":"2026-10-11T00:08:41.052999Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1609,"timings":{"blocked":-1,"dns":595,"connect":196,"send":0,"wait":200,"receive":0,"ssl":617},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gqj.yenivaziyet.com/assets/_e8m3.js","fqdn":"gqj.yenivaziyet.com","domain":"yenivaziyet.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{21840c18-52a2-404f-9007-9294a71509bb}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.275Z","timestamp":1791676944275,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: gqj.yenivaziyet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"gqj.yenivaziyet.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","date":"2026-10-11T00:02:32.555Z","timestamp":1791676952555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /verify?sc=WAeqMA8IZd\u0026v=384521008041705472 HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-1072\"\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4210,"size_decoded":2173,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1879f494fa38da65499486994208805e","sha1":"2f5eb7685192beb4dc81cb2ba22561f0bdc9e3ff","sha256":"616b80b3fa218053dde2c793a85c18a2f015898faeeabbbca18a7a1a7616a2c6","sha512":"98f96b529236a0ea35fe314bde188f064aa899007574128c363fb628536afec103551f2e4ca2f3362db06b06d4433712f758f743577591b7fbe6bb0712388b28","ssdeep":"96:9Uu42lPbCslLY2iGIJfGsuRgd5C62rzT0jgXDHiMGxRDaCdFS:G2h9lpq+suRg5CRXT0QDHiMC5aCu","tlshash":"8391b7a6b48125217223d12a5cabb21d32778607d187d70cfcace0859fd1a950773fda","first_seen":"2026-10-11T00:08:41.054798Z","last_seen":"2026-10-11T00:08:41.054798Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.331Z","timestamp":1791676954331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper-DlAUqK2U.js HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:24:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be52-5b\"\r\nexpires: Tue, 10 Nov 2026 00:02:34 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":543,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-10-11T00:55:16.445979Z","times_seen":28326,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/api/chat/funnel?sc=WAeqMA8IZd\u0026v=384521008041705472","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472","date":"2026-10-11T00:02:34.652Z","timestamp":1791676954652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /api/chat/funnel?sc=WAeqMA8IZd\u0026v=384521008041705472 HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9756,"size_decoded":3474,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"43c1760da698388a74de4532e65ac73c","sha1":"1bc7fc8d25a88598b11022d8594091b8a0072055","sha256":"7edcf233f44ac5dfff2af2a3cddfcd1d5083a67514c7a89be6d6f13e005f3db0","sha512":"ae44a147c684e198bb513a33a8683b566237cceab6855777e1088488be3607a43386b81f80b00d43b9173de033cc0544bb0f967c5695cb755aa87f8c51bab09d","ssdeep":"192:OwrO7I7X0MdNdPwJL+ERpPqoAhlLEF/1gtE6uYg5DgQQqDOJdkINaEolhNhESb:3o3saUuUS2Sb","tlshash":"23123f626e32c6fd4bed56c1135ff944216d39737a0bef8cb354ce24028cd568649aa3","first_seen":"2026-10-11T00:08:41.057209Z","last_seen":"2026-10-11T00:08:41.057209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jump.7ee7e.xyz/jumpDomainNameService_manage/getJumpDomainNameService_managePublic?u=Nmh1Lnh5eg%3D%3D\u0026OriginalParam=Lw%3D%3D","fqdn":"jump.7ee7e.xyz","domain":"7ee7e.xyz","tld":"xyz"},"ip":{"addr":"104.21.62.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:02:20.376Z","timestamp":1791676940376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7ee7e.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Oct 2026 13:17:24 GMT","end":"Thu, 31 Dec 2026 14:16:06 GMT"},"fingerprint":{"sha1":"B3:AF:66:5B:2D:DA:A4:57:2B:91:1F:84:5B:57:AD:C7:1B:98:73:81","sha256":"65:66:8E:60:41:B2:3F:40:D5:26:FB:2A:35:9E:37:E0:D7:3D:A1:E3:F3:C5:84:2A:70:DF:85:B5:B7:B4:47:43"}}},"request":{"raw":"GET /jumpDomainNameService_manage/getJumpDomainNameService_managePublic?u=Nmh1Lnh5eg%3D%3D\u0026OriginalParam=Lw%3D%3D HTTP/1.1\r\nHost: jump.7ee7e.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://6hu.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 00:02:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=60\r\nexpires: Sun, 11 Oct 2026 00:03:21 GMT\r\nlocation: https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1791677001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8Q%2Bju%2BH7j%2FXPsEY6m2btcY1UTln3r0YL2SEeghlAIu5FGWkmqDBk7rS1XnMtKgmEwuN5sF%2BHdoz5QBvjEQK9e61nAUt%2F%2FvwCa2rQ7GZSYb5UrDGzy4hzbin%2FoMFpxyiUg%3D%3D\"}]}\r\npriority: u=0,i\r\ncf-ray: a489986e0e2656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":1017,"timings":{"blocked":-1,"dns":92,"connect":19,"send":0,"wait":905,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tvy02.tehnotrade-ua.com/assets/_e8m3.js","fqdn":"tvy02.tehnotrade-ua.com","domain":"tehnotrade-ua.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{12af4b79-e39b-49c9-b45b-cee4ac808810}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.277Z","timestamp":1791676944277,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: tvy02.tehnotrade-ua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.tehnotrade-ua.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tvy02.senang2.com/assets/_e8m3.js","fqdn":"tvy02.senang2.com","domain":"senang2.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{2904f43a-4824-4d5e-a682-5583acafc063}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.281Z","timestamp":1791676944281,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: tvy02.senang2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"tvy02.senang2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/assets/_e8m3.js","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{a84f9970-838b-41a2-9660-e76b16cbe5a0}?https://www.zheguankj.com","date":"2026-10-11T00:02:24.300Z","timestamp":1791676944300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /assets/_e8m3.js HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 09:24:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4be50-43\"\r\nexpires: Tue, 10 Nov 2026 00:02:25 GMT\r\ncache-control: max-age=2592000\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67,"size_decoded":523,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"4818afa5df14bd3ad405cb319cf37dba","sha1":"ebbd40052382da3740e079fe0ce47e8a8ca163eb","sha256":"b094d0861a55061dd8f64550bbb8945c24c0c63bb52717291a2b3f8996c64302","sha512":"419772c4c67b5d592f7b3a5bea719c4e328bbfef88cdbe12b3c567af116976f4f52df994ea30dbbbb0ff688cb2d53bfe556ca4d23c904feb2c113646baa673c3","ssdeep":"","tlshash":"e7a022ebb8300a3800200f383e3a338038338028000a2a00c22b38802300e8222203f0","first_seen":"2026-10-11T00:08:41.059231Z","last_seen":"2026-10-11T00:08:41.059231Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1094,"timings":{"blocked":0,"dns":0,"connect":274,"send":0,"wait":274,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8.217.84.13/go/WAeqMA8IZd?_f=1\u0026_relay=www.zheguankj.com\u0026_rf=aHR0cDovLzZodS54eXov","fqdn":"8.217.84.13","domain":"8.217.84.13","tld":""},"ip":{"addr":"8.217.84.13","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.zheguankj.com/Cp1md33t/r8WURgnsrV?c=WAeqMA8IZd","date":"2026-10-11T00:02:32.244Z","timestamp":1791676952244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8.217.84.13","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 03 Oct 2026 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"8F:E8:20:49:5D:B9:DA:E5:39:D8:C2:27:C3:C8:F7:4B:60:5C:DA:E4","sha256":"2A:AD:E7:53:05:15:A0:54:E9:4C:B2:AC:5B:CF:65:D1:C2:2E:1A:21:8F:08:1C:10:46:EC:1B:91:68:8C:66:B3"}}},"request":{"raw":"GET /go/WAeqMA8IZd?_f=1\u0026_relay=www.zheguankj.com\u0026_rf=aHR0cDovLzZodS54eXov HTTP/1.1\r\nHost: 8.217.84.13\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 11 Oct 2026 00:02:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://8.217.84.13/verify?sc=WAeqMA8IZd\u0026v=384521008041705472\r\ncache-control: no-cache,must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T02:43:33.002713Z","times_seen":19015438,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}