{"report_id":"64b24f51-105d-4809-9bf3-e577186bc224","version":0,"status":"done","tags":[],"date":"2026-06-17T16:17:14Z","url":{"schema":"http","addr":"lnfww.com","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"lnfww.com/","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"title":"Trezor官网 | 全球开源硬件冷钱包领先品牌 | Trezor Suite","dom":{"size":55065,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3486)","md5":"ec1606585e39069f3f151229ccaa882e","sha1":"fc8dc1472d6b8e1f6b93402f08e52ca045e914f3","sha256":"3f5572515011618f3e585137a8e949ad40154122e2959361a7623abbfaad44cc","sha512":"1bb9ad953868dd6d87296cc13d91850d2def3ae9567054b1e5a097176bfce5a225527123a78cd1fb8ecbeb01023d515a62101cc6ca5e84af1ff666c7eb2465e6","ssdeep":"768:L8dVpdz5U8qYnPP4YwiLAt2S/h7SOU2B1s/CvdR1iVl2wI:L8d/dVgoPqiLAt2S/hp1s/Cvz1iVl2wI","tlshash":"2333747452f862af214387d59a71562a3f8af967f92f424076bd8be49f93ccacc03504","dom_hash":"domhashd1f587ab05fe9fd3ae43f29aa858f314","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lnfww.com","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T16:17:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"lnfww.com","ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-02-20","domain_rank":0,"first_seen":"2026-06-15T17:22:38.22486Z","last_seen":"2026-06-15T17:22:38.22486Z","alert_count":150,"request_count":25,"received_data":1769376,"sent_data":12364,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lnfww.com/js/jquery.min.js","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b5a269bd363e0886c17d855c2aab241","sha1":"042dd055cd289215835a58507c9531f808e1648a","sha256":"1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e","sha512":"977faebf1f40aec38e5a501c973a740a2361aa5d5828a3b7c26c0a6032da879976247b1d40ed3aa0840fe15353720bc95f4a3951878a304728f1dbd772b35bca","ssdeep":"1536:sNhEyjjTikEJO4edXXe9J578go6MWXqcVhkLyB4Lw13sh2bzrlk+iuH7U3gBORD2:qxcq0hkLZwpsYbbzORDU8CuQ","tlshash":"e883d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f068c5d57eb8a8e507bf2c","size":86713,"data":"","first_seen":"2023-03-07T01:19:28Z","last_seen":"2026-06-20T10:24:30.386353Z","times_seen":8873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/js/swiper-bundle.min.js","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc337be52f0a6e529de8418e7b1b5fa","sha1":"0dee10e92826fc5cfe7d2fad2f730d3253076c7a","sha256":"46b5a8e3460a7ec8fe6043ade762bc40d18735c3db77a68e4bead56b3de7f355","sha512":"040045c62b41998b78e0dea7d4d2099063ac35a55a0acfc6a5a2700e4b6b7e45880459cc0faa7997d9be29cff848b2522789987fe72cb57f7c358aec1bf33d6a","ssdeep":"3072:Ew783dMOhBnIqNMa7WpA2H79cVOd3dq9MyH:V78NMfqNMa7WpA2H79cVOd3dq9MU","tlshash":"95e31789b360b2e151e7325a539ed10263b65845b80ad1a470768cd7ac7de8c03bfefd","size":146371,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-20T05:28:59.411992Z","times_seen":1372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/js/main.js","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6753099326b06c76b6bdbd4bbaab482","sha1":"f3f4c01c2a2a6264ef49cb12fe66eedb945ddffa","sha256":"9c2b4c725542011ca5a1c937bc29e952231eb10ca0d8e3b960a01cb237340271","sha512":"42b05c16db361c21c1ce8e9c0f851ecfffb05f4da64e5b554432527863f89c3e94ed8d0ac0e0da028afc2a8a6952f9f7aa1f81a236be9a73f2455b249dec91a9","ssdeep":"96:875KAMS7w2nYFkC1GK8KLMHzwr+fCkW1AYKY/KPTCxKmpvHVpiTxp4NHpH9:875v7w2nYFkC1GPDzwr+fCkW1AY59TuK","tlshash":"37b1b04eb0f0aad0067f7269871fbc0426341a27920e8e41f99d5eed5f9693cb3d3589","size":5328,"data":"","first_seen":"2026-05-13T08:11:35.235322Z","last_seen":"2026-06-17T16:17:20.377372Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"62e70e8f6025a4e7fec2ff82738f6725","sha1":"ccd744ae3c69947743e12873d15c43193fc45962","sha256":"2d5d7aa8e05188e87e001d0a8f1c928ee26f4598707ba4b49eb3529bb919cf3b","sha512":"501eb6c3fe735da06d9365d186ac25c2a774c214aea69128fd980fc6ef74566ed73b5e63009eb77898673a0c1e1539225e872f0ce131c8b9b932dab7b5b1b3e4","ssdeep":"","tlshash":"e0f0e91af070a5f501bfb16f0a176c483432859be0444d81fc6e2db51f9423c72a7b5d","size":623,"data":"","first_seen":"2026-06-08T16:13:29.922189Z","last_seen":"2026-06-17T16:17:20.409658Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lnfww.com/","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T16:16:47.230Z","timestamp":1781713007230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 16 Jun 2026 07:29:41 GMT\r\netag: \"e020-65459e80247a1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 14633\r\ncontent-type: text/html\r\ndate: Wed, 17 Jun 2026 16:16:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":57376,"size_decoded":14917,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3456)","md5":"2bf27d812a9b43c212fa54f544a71112","sha1":"885d92421a645563ee4f56515223a6f821c2166b","sha256":"bcea7e2e24560eafd7f6802fcef8130c56a6a0b06b1005c7310415a2602a95bf","sha512":"48777134f5e29a0bee45037f30f8a7ab101dd8a6aca9d8ba4681ac7166b8ef38df97c6b85f0f0baa8a4569b9ec398a98fb94e728ed7bcd658d2c703bb15d88ac","ssdeep":"768:X77VF7L/Uz4GndPKY8KxAt2SVh7o5rpp18/SvdR1iFNSiA:X77T7DtuPwKxAt2SVhc18/Svz1iFNSiA","tlshash":"b243637452f862af218387d59a71562a7f8ae877f92f424076bd8be45fd3c8acc03504","first_seen":"2026-06-17T16:17:20.32288Z","last_seen":"2026-06-17T16:17:20.32288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1512,"timings":{"blocked":-1,"dns":624,"connect":176,"send":0,"wait":352,"receive":0,"ssl":360},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-5-1.jpg","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.023Z","timestamp":1781713009023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-5-1.jpg HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"9763-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 38755\r\ncontent-type: image/jpeg\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":38755,"size_decoded":38988,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x192, components 3","md5":"f0c1401a08f7c635a4b8af41fad830c6","sha1":"c95228409557d0bd20b6325ffbf560e7f6f584df","sha256":"51068d1c4da98c685b929d2eeba127e0fe4667def5c44a27da5f7db039b365e8","sha512":"96da173cccbdca877e4f83e0c0fff3fd447cc5ca2008b24827ca29169db272d5e3358d835c35d1e3079c99782f3810cc584b0f0aa6679e1a4c7c278fb9659797","ssdeep":"768:PoepDwIMVjI6lpMkrzBbZ4lvh3H1BgrBodfelNOkN85LOEO:AHjIgrzBbohXQrBoZe/OkG5VO","tlshash":"6b03e1e342dc1c16fa9fad30814a303e2ffb8e7a562c26c31aca6d3c6999764e911444","first_seen":"2025-10-30T11:16:24.701522Z","last_seen":"2026-06-17T16:17:20.323939Z","times_seen":6,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-code-7.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.028Z","timestamp":1781713009028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-code-7.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"5af-651313101280b\"\r\naccept-ranges: bytes\r\ncontent-length: 1455\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1455,"size_decoded":1685,"mime_type":"image/png","magic":"PNG image data, 184 x 184, 8-bit grayscale, non-interlaced","md5":"d93d6b553a3d32c62579dc00e8c9058c","sha1":"9117fabfff2d8b380e488d59fe07bd24e47c85a4","sha256":"5b202438db795992a2c302fce0fcca5848afa44b67e1d55a29e98d5ee6749cf7","sha512":"9871183d86d86f69bd2c4045043335ba9aa54741b82cc28dab580438576baaea1a2f19354912df6b047ded879cb5671013b44b9371573b285aa5bd1eeaa563f8","ssdeep":"","tlshash":"c03119eb8aa418989b4e647f8882076b3427a5542a3241275c9b5a33cf0b7412c80aec","first_seen":"2026-05-13T08:11:35.237517Z","last_seen":"2026-06-17T16:17:20.325168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-icon-8-2.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.029Z","timestamp":1781713009029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-icon-8-2.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"1e38-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 7736\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7736,"size_decoded":7967,"mime_type":"image/png","magic":"PNG image data, 306 x 64, 8-bit/color RGBA, non-interlaced","md5":"3eb9fddec4c6d05d128f68e6e8140305","sha1":"693458140b32d4f6e5187db4dc0c3caacb43fef8","sha256":"a1548ff237616c362194e6a6784b0bb9a8337f05e6ab9297009a69b754910f43","sha512":"7fb6a4179b3afc9bd791a14ec73a3639540d98c7edef199b6ae8103be0bb2bd44c138f68588a4726dcbb8aa23dfcadefeab4382f3899e0cabf20a56b7117d7f6","ssdeep":"192:ISnDCROyrbtXWb6QZLp6t1ISkwO14UaWlvvPfcq66B:PDCkrb6Qa1JkwOzaWV68","tlshash":"def1afaa69b7a205e30086da7661043d2f573d39722e789d7ad0c974d84d8b97f54180","first_seen":"2026-02-02T16:19:09.760342Z","last_seen":"2026-06-17T16:17:20.326286Z","times_seen":5,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-10-1.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.032Z","timestamp":1781713009032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-10-1.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"32b5-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 12981\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12981,"size_decoded":13213,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 377x400, components 3","md5":"d7652c702a53f0ea890ccce698508946","sha1":"0377ef23021053889133c345006dc71cfb01ce30","sha256":"b01a1d561022ddc4effb66249f56af2443b2c86e306b302af81033373ea4a794","sha512":"d06df4a3a68f371db472ce2d23e10d0988bf3cc37523dacc9ea2057e111b50ccc45a4f1c92afe8bd2b6089e77f87cfbc5c4e68d41aa8bccfeeb53336b5273d34","ssdeep":"384:cBbn1QtexYWVZFZxTzxFZ+qilMxsxpvnjAe5aPSLxVkgn:cJ12P2TxpvdWxpJsSNVkG","tlshash":"0242c02d83e280ccc95517f42cad5bde95c5aff48ff0637a16b41222be65245be31817","first_seen":"2026-05-13T08:11:35.228301Z","last_seen":"2026-06-17T16:17:20.326918Z","times_seen":4,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-icon-11-3.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.038Z","timestamp":1781713009038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-icon-11-3.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"2d8-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 728\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":728,"size_decoded":957,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 40x40, components 3","md5":"4e283ccc4f59b7820dc16e5ff3dab18a","sha1":"3530a7fee09b07b2479919bfb289515f7db03768","sha256":"95fea38f965ed256b71efe4dbd1953b10e141666aa17b50ce0fc4bcbb4f1b21f","sha512":"8cd64e6570e197eacc72a08b684d95c3bdc4b4c4a04ee2b4fbcb97f648357d2e43f44103cc3c1b2a00bb7b0d7a204ad9af0437f2242af9a3129bad0361b9e69f","ssdeep":"","tlshash":"d201ac7e5b024360dc2385b64e071192e79e5a8e79d4670e2b6342e3ca20ae8944c64c","first_seen":"2026-05-13T08:11:35.204851Z","last_seen":"2026-06-17T16:17:20.328024Z","times_seen":4,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/styles/images/index-banner-1.jpg","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.419Z","timestamp":1781713009419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /styles/images/index-banner-1.jpg HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"17797-6513131012fdb\"\r\naccept-ranges: bytes\r\ncontent-length: 96151\r\ncontent-type: image/jpeg\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":96151,"size_decoded":96385,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x960, components 3","md5":"af74a5bd3c3f8088798092b4716ae45a","sha1":"8b082d8758ddd3f36d93cac42b07191ceb003139","sha256":"4910a69fc12bd0116fd294a68aaea45d82c65b31b285ddb99ee2b7749b6d4380","sha512":"996c7a69f91eddfa35a7b464fffb51bed2c6ac7d652ea1f92ab6122dc93855efed01634d7c6c21e08938eed2a0e2b6200e12fac35f89d403c7e8a1a04ea768ae","ssdeep":"1536:9vNsKrEs1vCZXQEQvuhXFHt730z5K2O8X2rHm9uecGv6vgsaMlgKN/OSF5BVC1:YKos1vC9jXFVMK2O82jm9uecHzlHJ5X8","tlshash":"1a93123cc5b1755eb1b78b7e50853ebb90a7cfce134ba0900ab4c9c7d8498a83e65649","first_seen":"2026-05-13T08:11:35.213982Z","last_seen":"2026-06-17T16:17:20.328561Z","times_seen":4,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":632,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/styles/swiper-bundle.min.css","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:48.973Z","timestamp":1781713008973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /styles/swiper-bundle.min.css HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"366e-6513131012fdb-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4190\r\ncontent-type: text/css\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13934,"size_decoded":4472,"mime_type":"text/css","magic":"ASCII text, with very long lines (13679)","md5":"2845ec55ea99279862ac6c90c1a5624d","sha1":"9e78e41c085b7c0dd36d903765940dcb41bc9d03","sha256":"bc0b8e8cf4d354da992e3b614bc221c793e74ee11ad6ab9760b3cd965d14c66b","sha512":"68cba9e08e81525d1d1b82016f4fdfdf6dbbd1ae573fb1f5c6994027cd2e54a3fa7a360281959c06e7658ddb288a7b5f1f19f9a37d3625b9ead455ec05a32ea1","ssdeep":"384:b8Ubeo7zOqgx9BUsm/XCPif65W/1mXA82FHyx:b1br7zOlbDm/Xcif65W/1mXA82F6","tlshash":"1252236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6fa8b9122eb95","first_seen":"2023-05-03T18:24:29Z","last_seen":"2026-06-20T05:28:59.322247Z","times_seen":888,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-7.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.027Z","timestamp":1781713009027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-7.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"76fc-6513131012fdb\"\r\naccept-ranges: bytes\r\ncontent-length: 30460\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":30460,"size_decoded":30692,"mime_type":"image/png","magic":"PNG image data, 480 x 720, 8-bit colormap, non-interlaced","md5":"7d7885aec3762351f7f25533c67358a9","sha1":"fa58405a3f4185254a2e565bbd221e2f110b6821","sha256":"54f9f3379bde18e4df47bdd00a5137a5a69922bca40b641a0d7f1aa582b1614e","sha512":"437319b2e043c307e8145fff4e69186d671ba9986a03f4638d8dbcb1cd9a4d45bc97d791a9ec2a8a3143339df137fcbf658989d637789a1ee6289b04db784fd0","ssdeep":"768:d8OXwES3KHmZG9YovrU1mtAPXR+LC0yNPRNEJ/BMB:d8l2Hn9YvEAPXANyVRNEJWB","tlshash":"40d2f153e201b489aac163f3d5b48f3c4f457b6b4442e9e03abd4952b89edf5878f844","first_seen":"2025-10-30T11:16:24.703237Z","last_seen":"2026-06-17T16:17:20.330459Z","times_seen":6,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-9-1.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.030Z","timestamp":1781713009030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-9-1.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"3a33-6513131012fdb\"\r\naccept-ranges: bytes\r\ncontent-length: 14899\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14899,"size_decoded":15131,"mime_type":"image/png","magic":"PNG image data, 762 x 1128, 8-bit colormap, non-interlaced","md5":"a9116cc66e00e8d8802c3592a9f960ac","sha1":"ec9fde6d66722dbc53210469feab465a820df6fa","sha256":"9a5cdbabfaf9c12ef343be3d94749cddc2929931ec5083a99bdd4a612079c530","sha512":"d5e3700a8fff31afc57c398fc3b7173608fbbcbedf62c1438e82a34bbfc5b4c3de7099f75a45f88e391bad32c115bc77318d329a363b17f7f1150a333a8cff66","ssdeep":"384:vl1AO7e5FZuk4YbiabTvZqeXDhj2Mo55gMBjruZUY2:oO7eAk4YbVvQezRo55gIjr28","tlshash":"8062c078c1bd846cef3664be3dd453eeb548ce8f199934976420fe72623e468a00d212","first_seen":"2025-10-30T11:16:24.710316Z","last_seen":"2026-06-17T16:17:20.332003Z","times_seen":6,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/styles/main.css","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:48.975Z","timestamp":1781713008975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /styles/main.css HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"1c048-6513131012fdb-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 17790\r\ncontent-type: text/css\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114760,"size_decoded":18074,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (740)","md5":"5ead6d1243acbb4ecaa293e0d44d186f","sha1":"5910beabfff9d931f5f706f1ed5337c0dc6519a6","sha256":"5489ce0fba34b061d7692382a4d94ff5d3ee80d2c8c744959c0827d0a2a77e0c","sha512":"cf06d3479f3ceeb8b1b5ca4b98be80d30812743a8aedeab7c84f5eeefb9fafce063ed87bd590e48c6f9928b0684378fef5dee0b8ba46757f7adc172207eff890","ssdeep":"1536:Tf5Hkxvr6mmIvbaq9FBB5x5uWTDUFTvy6Qlz5k2Pk3FWP+IQHQ8hkXo1dkqeHwi8:z5HpmZP75x5b4","tlshash":"fbb32f487df10508a475d26d74a82a65776cd182f75edcebb2d12929dfce2808ce32cb","first_seen":"2026-05-13T08:11:35.245379Z","last_seen":"2026-06-17T16:17:20.334111Z","times_seen":4,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/js/swiper-bundle.min.js","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:48.983Z","timestamp":1781713008983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /js/swiper-bundle.min.js HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"23bc3-6513131012fdb-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 39024\r\ncontent-type: text/javascript\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":146371,"size_decoded":39315,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"ddc337be52f0a6e529de8418e7b1b5fa","sha1":"0dee10e92826fc5cfe7d2fad2f730d3253076c7a","sha256":"46b5a8e3460a7ec8fe6043ade762bc40d18735c3db77a68e4bead56b3de7f355","sha512":"040045c62b41998b78e0dea7d4d2099063ac35a55a0acfc6a5a2700e4b6b7e45880459cc0faa7997d9be29cff848b2522789987fe72cb57f7c358aec1bf33d6a","ssdeep":"3072:Ew783dMOhBnIqNMa7WpA2H79cVOd3dq9MyH:V78NMfqNMa7WpA2H79cVOd3dq9MU","tlshash":"95e31789b360b2e151e7325a539ed10263b65845b80ad1a470768cd7ac7de8c03bfefd","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-06-20T05:28:59.411992Z","times_seen":1372,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-2.jpg","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.020Z","timestamp":1781713009020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-2.jpg HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"39b0d-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 236301\r\ncontent-type: image/jpeg\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":236301,"size_decoded":236536,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1440, components 3","md5":"af16c12f970a2a1c356d15586197934e","sha1":"f8c35194aefc4714d9e8795de1dcb43b09be3044","sha256":"853be8d9520e6d4692ecd4b9f6eeb20a5438732b04a006f1e55ecdc3b414d797","sha512":"873d562fe5e8097fb7860dc1a8b8c5bb498a680844011888bb5ae1e2e742548bf7fbb09e2edc28657092caa2ae16c663fb4a65624212f1bade09c06a64211d4e","ssdeep":"6144:YNVvNKn3Zkqs72fwtMmGWRaAls/FuLWi2Xxufo:uVU3pfwtLLls/U2Xxufo","tlshash":"883412530bd18526980e94286997c77cdf5eb4c9e745243be227afec684dc8e35dc282","first_seen":"2025-07-31T17:37:45.822364Z","last_seen":"2026-06-17T16:17:20.34872Z","times_seen":9,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-3.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.022Z","timestamp":1781713009022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-3.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"10efa-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 69370\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69370,"size_decoded":69603,"mime_type":"image/png","magic":"PNG image data, 2476 x 1048, 8-bit colormap, non-interlaced","md5":"14779fce7b1403209dfb2c58d19598c6","sha1":"8e7b058b95a9c8be2c9fbe4b88168c79e487a324","sha256":"69c8a4f0cecae5b61d4d02426c0c11000fef56336b7d0a89a2a7b9dc5e0872ba","sha512":"58fd7aa4db74b81a4b5311e3c23f33bc0fae7ef5476356c0e88050e685ba99a1916ec9e254d05666201b1c1b901fe8829f66df3f0e6bc355bc337d0af57ce18b","ssdeep":"1536:r+pOPnAnFLu5zbII+KHbeuCe1d/ftgoHFBjQj:nPAFLu5z+/uBIwLcj","tlshash":"2c63020d42172f18c9342cbdf96b88c1e9ad679dea1dfb3caa74412d5037d6b1226b42","first_seen":"2025-10-30T11:16:24.672778Z","last_seen":"2026-06-17T16:17:20.350812Z","times_seen":7,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-5-2.jpg","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.025Z","timestamp":1781713009025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-5-2.jpg HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"9bcd-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 39885\r\ncontent-type: image/jpeg\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":39885,"size_decoded":40118,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x192, components 3","md5":"958b94882d91cb18c24133d47d39abd9","sha1":"8139533579e637112e7790524e9f1877e35585b1","sha256":"2f777a94a29db5b40cebb2d908fca9babc8c71ca7bfa1a03389a37329eee4608","sha512":"618f53175234d2975c578ff02ca6fbf6623a4589d74bbad783428050ff3633f5f6731e50b1d3f63a99465ee1af26226db90cce806ab8650ee2af055a0f6d5c28","ssdeep":"768:PM+5jH3bLiU/w1ggRXHXp57thAlbmgcgkPPPPwAoPPgEi6qATpsE/G9q:Ua33oPR3Xp57tKlJLbfhHf","tlshash":"3b0301fe63329d73ed5528f8dc407b5a6b200d97e85a838202d95aac01b71cb97e71f1","first_seen":"2025-10-30T11:16:24.675648Z","last_seen":"2026-06-17T16:17:20.352549Z","times_seen":6,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-icon-6.svg","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.026Z","timestamp":1781713009026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-icon-6.svg HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"458a-6513131012bf3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 8037\r\ncontent-type: image/svg+xml\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17802,"size_decoded":8324,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42e881e41d0a61ee817e5e04183b71b4","sha1":"8a1e83f5d50a51a57ca38d268f6efb4075116b23","sha256":"481c49f8f7850a6d448686899c60d26f693997c7df38d51a14beca5f6e343204","sha512":"f1962908c48fb0b52d532bb7c13576ec6655bd8f73f3c967cb099ee8a554b3e0869639f0d45839d1d39aa549a7e75432a7ec3dd611c2cea61318f6410eb5dc94","ssdeep":"384:6tXnK5w0c+7XPPB8XV/hEHjmHsQlSDbYhALsA+uX0UTnqG+khVvkkejss:E0wiXsSHIq4A+uku7kj","tlshash":"cb8295debb605bf4e88ae7d7ee3200a9351e64ff6592cb74c2189f0434824acdd55c92","first_seen":"2026-05-13T08:11:35.248946Z","last_seen":"2026-06-17T16:17:20.367077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-11-1-1.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.033Z","timestamp":1781713009033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-11-1-1.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"1a833-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 108595\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":108595,"size_decoded":108829,"mime_type":"image/png","magic":"PNG image data, 560 x 560, 8-bit colormap, non-interlaced","md5":"5d8830364302b7495ed6d65089ba69bb","sha1":"bcaa867137e54ca3d62e393aedd15f6675a78426","sha256":"79e40261f795be8a863424cc205caa14687c6a3fe725991163bb86c2951b2363","sha512":"9b550181fc9ad3b5df24a1cb135c68224b9cf629d39791f8da454bb364c5315f7184f66d0c675f83ccfbe9214a2ef459dfb87b2ea8c1ffb1e1ce07bfdcd9c1f2","ssdeep":"1536:LbwSmRip4xaP/S5WMOBNLEOr9+3kDQ6USlorvVQ9eMULhJsNMj0Jm1iOp4c3q:L8RRC04oR2HydQ9ePh2ZJm1iO/6","tlshash":"9eb323591bfa4c7920b13501c2b445549eb0eb4f18e15fa270cb99b7e3fbee51e982c1","first_seen":"2026-05-13T08:11:35.240576Z","last_seen":"2026-06-17T16:17:20.368603Z","times_seen":4,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-icon-11-1.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.036Z","timestamp":1781713009036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-icon-11-1.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"2d5-651313101280b\"\r\naccept-ranges: bytes\r\ncontent-length: 725\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":725,"size_decoded":954,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 40x40, components 3","md5":"8d4e4a342dacbe252ff603b6ac24070f","sha1":"ca9a4a3b7599db7926fa5c7481cac61a5e86768d","sha256":"3e20f3803e70a646e5719e18e459f089b3a17d8a9b43b107bf860745a34264ca","sha512":"cb8e0ce047686a57dbca21259a0acdd5e1911ef6904a394bf33dddca7595ead3f80658c57e39d5171780de461f853b6d09fb41948c234910b0785dd744057c8f","ssdeep":"","tlshash":"0601ac7a5b4243609c2385b65e171193e79e598e75d0670d2a6342e3ca20be8944c64c","first_seen":"2026-05-13T08:11:35.221343Z","last_seen":"2026-06-17T16:17:20.370349Z","times_seen":4,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/js/jquery.min.js","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:48.977Z","timestamp":1781713008977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"152b9-6513131012fdb-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 30089\r\ncontent-type: text/javascript\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":86713,"size_decoded":30380,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators","md5":"5b5a269bd363e0886c17d855c2aab241","sha1":"042dd055cd289215835a58507c9531f808e1648a","sha256":"1cf30e59d21d4ae560af7143f5913efcc8222bcaa4fcc7508eb802b5faa9e94e","sha512":"977faebf1f40aec38e5a501c973a740a2361aa5d5828a3b7c26c0a6032da879976247b1d40ed3aa0840fe15353720bc95f4a3951878a304728f1dbd772b35bca","ssdeep":"1536:sNhEyjjTikEJO4edXXe9J578go6MWXqcVhkLyB4Lw13sh2bzrlk+iuH7U3gBORD2:qxcq0hkLZwpsYbbzORDU8CuQ","tlshash":"e883d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f068c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:19:28Z","last_seen":"2026-06-20T10:24:30.386353Z","times_seen":8873,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/js/main.js","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.015Z","timestamp":1781713009015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"14d0-6513131012fdb-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1235\r\ncontent-type: text/javascript\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5328,"size_decoded":1524,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b6753099326b06c76b6bdbd4bbaab482","sha1":"f3f4c01c2a2a6264ef49cb12fe66eedb945ddffa","sha256":"9c2b4c725542011ca5a1c937bc29e952231eb10ca0d8e3b960a01cb237340271","sha512":"42b05c16db361c21c1ce8e9c0f851ecfffb05f4da64e5b554432527863f89c3e94ed8d0ac0e0da028afc2a8a6952f9f7aa1f81a236be9a73f2455b249dec91a9","ssdeep":"96:875KAMS7w2nYFkC1GK8KLMHzwr+fCkW1AYKY/KPTCxKmpvHVpiTxp4NHpH9:875v7w2nYFkC1GPDzwr+fCkW1AY59TuK","tlshash":"37b1b04eb0f0aad0067f7269871fbc0426341a27920e8e41f99d5eed5f9693cb3d3589","first_seen":"2026-05-13T08:11:35.235322Z","last_seen":"2026-06-17T16:17:20.377372Z","times_seen":4,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-9-2.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.031Z","timestamp":1781713009031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-9-2.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"3f59-6513131012fdb\"\r\naccept-ranges: bytes\r\ncontent-length: 16217\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16217,"size_decoded":16449,"mime_type":"image/png","magic":"PNG image data, 762 x 1128, 8-bit colormap, non-interlaced","md5":"40bea9763e32ce9971dec8afd2e26a03","sha1":"85fbf4312b68dea148edea4cc40cbc560a2b8667","sha256":"80c2352cecf371a04c24a96118ca7dc46d824ed796c89252f26a29a32522a2a1","sha512":"605e7adbd522b5ed2d078675abd5acae95f5889b889a55648d5fed569bee3409d2c0dd200bf66f69b2a82a1e0faa4ef3dd307d1a1e4976444d865d738d496018","ssdeep":"384:viDIu2cngfhV0e+OlJ0R387ZQVNmyWefb6dxuK3Q3u4byjF0IOhC8Sw:SIcgbZG32ZwmifWxn3Q3u4+SIOhC8Sw","tlshash":"e772e1910da7248ff71e3abdc89433445a5ddc3e13b03532c5d636bed67a872b84a960","first_seen":"2025-10-30T11:16:24.696097Z","last_seen":"2026-06-17T16:17:20.380005Z","times_seen":6,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-11-1-2.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.035Z","timestamp":1781713009035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-11-1-2.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"4ee15-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 323093\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":323093,"size_decoded":323327,"mime_type":"image/png","magic":"PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced","md5":"25250a1e627ef61692b4d35fd4cab924","sha1":"eb310e6a8cae24ebe434305f736e85f01f684b84","sha256":"be0ec6fba941759a41d2f36d30b9a656310e551c66dc9d98f72daf00598000fd","sha512":"efcdf83f38bac199bbbc6aac2b91e020880e032dfc33f79067e2c2d379c1088720457c6c4fc45b7861bbc195ecdc9ce6b36c20239d9b84ac76a4e2c103aec693","ssdeep":"6144:k8LtCSlv9UzOXkhXHO67ogv8+9Q9nJ0Gx3Cd5kDMcmucWROUdQhmvHX:kotCeezwkhXOEFpyJ0Gx3CdSD9jQUv3","tlshash":"36642325cb3613d3bd1bca1e1e9c68e2c12d42c59ad11779687f0c16a6cfeb742e41e8","first_seen":"2026-05-13T08:11:35.219524Z","last_seen":"2026-06-17T16:17:20.388407Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-img-11-1-3.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.036Z","timestamp":1781713009036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-img-11-1-3.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"4e690-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 321168\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":321168,"size_decoded":321402,"mime_type":"image/png","magic":"PNG image data, 560 x 560, 8-bit/color RGBA, non-interlaced","md5":"28d1230574e428304a5219d10fece4c6","sha1":"854d40680c84786cd32a1e1226a4fdaf20bf7401","sha256":"c513d8e4541c34ed13b433d71fed441c6089a0dfad524d4d275264e063a71c30","sha512":"615e17b07054d6404882f18dc45b7eb17a38c9ad6e0aba7e3564e8817a579a3358f72575b1e1eb7c70ceb8409d9f949833ccfb75350acbd50e1f656b77a809e6","ssdeep":"6144:RGyjw8Ax9/mOAC9WEbCwZ9//PcuqJs8uxc+ziIib+D+KDYp9m68P:RGiw8DmPbCu9J7lcV+D+K0Gf","tlshash":"da64234ceed416b6fbf2c58818a30e0bec0c8798a2f4d57beaef5135159241c76589c7","first_seen":"2026-05-13T08:11:35.233798Z","last_seen":"2026-06-17T16:17:20.391028Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/images/index-icon-11-2.png","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:49.037Z","timestamp":1781713009037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /images/index-icon-11-2.png HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"2d8-6513131012bf3\"\r\naccept-ranges: bytes\r\ncontent-length: 728\r\ncontent-type: image/png\r\ndate: Wed, 17 Jun 2026 16:16:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":728,"size_decoded":957,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 40x40, components 3","md5":"be158bd11fbdb0017d94491866852a1c","sha1":"384a6a0e2d59be06584fccad6d5e0744f413bfd9","sha256":"a71b04e0d6566777be8bc317bfbc96b09ffe9932538cb16615fe15693f9d47a6","sha512":"b20254fcd043382f9e51588384051d592ddb86164aba78383364826b610763053ee0cb8050188fa1d82f2f8cb107a29927a6535f59c54e12c624dddfc3146817","ssdeep":"","tlshash":"fe01e17f5b424b62dd23c7b67f061192e3df5982755473862f7142e1cb20dcc944864c","first_seen":"2026-05-13T08:11:35.212177Z","last_seen":"2026-06-17T16:17:20.392499Z","times_seen":4,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lnfww.com/favicon.ico","fqdn":"lnfww.com","domain":"lnfww.com","tld":"com"},"ip":{"addr":"216.118.243.79","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnfww.com/","date":"2026-06-17T16:16:50.066Z","timestamp":1781713010066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.lnfww.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 01:57:19 GMT","end":"Wed, 05 Aug 2026 01:57:18 GMT"},"fingerprint":{"sha1":"CC:F2:65:09:A0:1F:25:5B:10:9E:2B:0E:72:B3:76:DE:6A:9C:D5:58","sha256":"E7:9E:0B:1E:6E:5D:FA:DF:14:9C:C3:B9:61:27:49:AA:1C:8C:15:ED:EF:31:90:DD:49:16:9E:EE:51:89:16:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lnfww.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lnfww.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 07 May 2026 02:39:37 GMT\r\netag: \"646-65131310133c3-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1629\r\ncontent-type: image/x-icon\r\ndate: Wed, 17 Jun 2026 16:16:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1606,"size_decoded":1914,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64 with PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"ca4d4539a8a4ec2d15f134c487b24f2c","sha1":"5ae02398fc999ac8adf1f66f6ee6cfd60f2a0213","sha256":"6446a4974fae1084a9cbe75e1ff8cf59c239ca859ab7363bd3a527869036f62d","sha512":"d95939d46eecffc7cdea50cf3da40f194b8bd09cf2429269a72ae865dc2d3dc0a97601f4ba88e63af34284b08eab43392819707146be9e6efe2fedc0a4ac4019","ssdeep":"","tlshash":"b6310a5327c69d5fe5b9c8b124067a47b94da79ad3504360fa688ce7e4d06d24cc214e","first_seen":"2026-05-13T08:11:35.216693Z","last_seen":"2026-06-17T16:17:20.406917Z","times_seen":7,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-17","alert":"Phishing Block","trigger":"lnfww.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"lnfww.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}